Edit tour

Windows Analysis Report
http://mail.findmy-ld.help/icloud-archivos/code2022esp.php

Overview

General Information

Sample URL:	http://mail.findmy-ld.help/icloud-archivos/code2022esp.php
Analysis ID:	1532577
Tags:	openphish
Infos:

Detection

Score:	68
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for submitted file

Phishing site detected (based on favicon image match)

Detected non-DNS traffic on DNS port

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3740 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2032 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2264 --field-trial-handle=2216,i,12730649350140849657,17270425858010476698,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6388 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://mail.findmy-ld.help/icloud-archivos/code2022esp.php" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

ET PHISHING Possible Phish - Saved Website Comment Observed

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-13T17:51:45.214392+0200	2018334	2	Potentially Bad Traffic	50.6.138.164	80	192.168.2.4	49736	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://mail.findmy-ld.help/icloud-archivos/code2022esp.php

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Multi AV Scanner detection for domain / URL

Source: mail.findmy-ld.help

Virustotal: Detection: 5%

Perma Link

Multi AV Scanner detection for submitted file

Source: http://mail.findmy-ld.help/icloud-archivos/code2022esp.php

Virustotal: Detection: 5%

Perma Link

Phishing

Phishing site detected (based on favicon image match)

Source: http://findmy-ld.help

Matcher: Template: apple matched with high similarity

Source: http://mail.findmy-ld.help/icloud-archivos/code2022esp.php

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.4:56471 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.4:56472 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.4:56473 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:56474 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:56586 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.4:56469 -> 162.159.36.2:53

Source: Network traffic

Suricata IDS: 2018334 - Severity 2 - ET PHISHING Possible Phish - Saved Website Comment Observed : 50.6.138.164:80 -> 192.168.2.4:49736

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 13 Oct 2024 15:51:45 GMTServer: ApacheUpgrade: h2,h2cConnection: Upgrade, Keep-AliveVary: Accept-EncodingContent-Encoding: gzipContent-Length: 2876Keep-Alive: timeout=5, max=75Content-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 52 61 73 db 36 12 fd ee 5f 81 30 9d 8c d4 0b 49 cb 72 dc c4 16 d5 49 1c e7 ea 99 e4 d2 26 ce 75 6e 6e ae 19 08 58 89 48 40 80 01 40 c9 8a eb 9f d4 4f f9 09 f9 63 b7 00 29 8a b2 9d da bd f1 64 ae 73 47 7b 44 62 b1 fb f6 ed db 37 ba f3 f4 e5 e1 c9 3f 7e 3c 22 b9 2b 24 f9 f1 cd 93 e7 c7 87 24 8a d3 f4 e7 e1 61 9a 3e 3d 79 4a 7e 38 79 f1 9c ec 26 db 03 72 62 a8 b2 c2 09 ad a8 4c d3 a3 bf 45 24 ca 9d 2b f7 d3 74 b1 58 24 8b 61 a2 cd 2c 3d 79 95 7a a8 dd 54 6a 6d 21 e1 8e 47 e3 ad d1 9d 38 26 96 ce 81 93 a9 d1 05 a9 8c cc 7a db db 0f b6 fb 1e c0 36 08 82 49 5d f1 84 e9 22 56 36 a9 6c 4a df 0c ff 3e 48 0b 3d 11 12 52 a6 39 24 65 5e 92 38 46 40 df 63 3c ca 81 f2 f1 a8 00 47 89 07 8a e1 43 25 e6 59 74 a8 95 03 e5 e2 93 65 09 11 61 f5 29 8b 1c 9c ba 40 ee 80 b0 9c 1a 0b 2e 7b 73 f2 2c 7e 88 04 09 3e e1 a7 06 53 b4 80 2c 9a 0b 58 94 da b8 0e c4 42 70 97 67 1c e6 82 41 1c 0e f7 89 50 a8 09 95 b1 65 54 42 36 b8 4f 0a 7a 2a 8a aa 58 05 1a f8 91 14 ea 3d 31 20 b3 a8 34 30 05 c7 72 62 dd 52 82 cd 01 b0 47 8e c1 2c 4a d2 29 f6 b2 09 b3 36 22 0e f9 37 b4 fd f9 12 4e b7 fc 42 2e 29 80 0b 8a 29 cc 00 a8 35 3a 2d cb e4 b6 b0 42 49 83 16 e0 ba cf d6 95 87 5a e8 51 a8 bc 34 de a8 46 c4 77 d8 eb d6 68 a2 f9 12 5f 5c cc 09 93 d4 5a a4 20 62 1f 24 f8 f6 3b a1 42 81 21 ed 57 3c 95 95 e0 11 11 3c 8b 9a 95 45 84 53 47 63 97 83 df a8 14 0e b0 0f 8a 20 21 a6 95 cb c7 41 85 70 16 3c 96 7a a6 49 81 3e cb a2 33 ff 3a 8f 9a ee 1e b0 2e 6a b2 a2 15 a1 8d 28 c9 05 47 5c b9 a0 cb 56 61 b1 ca 14 c8 88 f8 9f b7 a1 c6 8f 2b 10 3e 45 7c 94 6f 94 76 49 6c 0e 8d 3e 9b 81 eb 0c 3c a5 d8 46 28 82 9b b3 ce 08 e6 62 b4 5c bc c8 c9 ea a6 99 ba 1e 05 8a 09 f0 d5 8a da 71 ac 83 32 ea c8 ea cf a4 21 7d 29 f1 48 b6 a9 04 93 46 56 cc 14 b6 d9 a4 39 07 23 a6 cb b8 cc b5 82 96 c8 b8 ed da 81 ce 07 9d c6 eb ed 39 e1 bc 2b de 63 9d 33 28 b1 a3 13 a1 38 9c 66 51 3c 88 48 f0 46 16 4d 31 3d b6 e2 23 ec 0f 1e 96 a7 07 4c 4b 6d f6 ef ee 3e f2 7f 07 1d fe fe 39 56 33 54 08 08 48 c2 3e 7f e2 02 37 c4 01 ff ed 44 ea 0f 15 f8 93 24 5c d8 52 5b e1 c4 5c b7 04 d3 7c 30 be e4 e8 56 95 15 77 60 48 1e c7 5c 18 dc 1d 98 0b cd 47 78 5f 19 e1 96 21 89 48 50 33 97 a3 b1 fc e9 79 38 9c e3 88 cb 12 67 72 80 fa 5a 13 a4 80 53 97 45 35 71 7a 81 78 10 58 30 ca c4 e7 4f b8 62 a9 19 95 c2 02 8f 31 41 60 d5 d3 cf bf e1 1b 85 03 63 b4 89 0b b0 96 ce 10 fe f0 0b 10 44 28 a6 8d 01 e6 74 82 4b dd 1c 6d 4d 3d cc 35 12 bc b0 71 0d dc cc 4b ce 50 3a 3a 91 de f1 b2 be b2 e7 59 94 53 7b e4 bf 9f d3 89 1f eb ec 97 ba c8 4f 8a b7 e1 70 82 df 11 29 75 a9 91 4f 4c 2b a7 63 26 b5 f5 db a5 d2 82 2f ba dc 2e 0e dc c0 b7 f0 97 a1 c7 cf f5 d5 61 7d 83 75 d8 bc 61 12 53 c5 e3 a9 66 55 97 93 7d ac f8 33 1f c3 54 9b eb 45 9d fb 85 84 0d 15 57 d4 5f d4
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 13 Oct 2024 15:51:45 GMTServer: ApacheLast-Modified: Sat, 26 Nov 2022 14:31:26 GMTAccept-Ranges: bytesVary: Accept-EncodingContent-Encoding: gzipContent-Length: 478Keep-Alive: timeout=5, max=74Connection: Keep-AliveContent-Type: text/cssData Raw: 1f 8b 08 00 00 00 00 00 00 03 dd 92 4f 4e 83 40 14 87 d7 f6 14 2f 6c 68 1b 69 6b e3 9f b4 6e 34 ae 5c 98 98 f6 00 66 0a 0f 3b 71 60 c8 cc ab 4a 8c 57 70 ed 51 8c c7 f1 02 5e 41 a0 b4 d1 49 83 0e e9 c2 b2 9c 07 bf 07 bf 6f be b3 50 c6 e4 85 cc 47 78 6a ed 95 87 88 8b 74 ec 5e a5 8a b3 00 a6 48 70 ad a4 7b 5a 3e d6 94 0a 1c c7 52 45 4c ac 66 0f c8 6f e7 34 1e 0e 06 d9 44 2b 7f 2c a4 cf 44 db fd 78 7d ff 7c 7b 71 3b fb b0 50 a2 ed f4 fa 51 b1 d3 d3 48 5e a2 e4 0d cd 79 dc 7b 90 61 e8 74 20 cc 37 52 db 59 1e 2b 13 44 df 03 a4 16 48 69 82 4e 27 fb 78 bf 0b 17 32 c9 32 d9 ff 40 db ef c0 c1 68 34 84 f3 40 ce 10 a6 a9 26 8c 34 5c c6 be 54 89 54 8c 30 e8 c1 b9 10 30 c9 5f d7 30 41 8d ea 3e 1f 96 dd b9 06 06 a4 58 80 11 53 77 20 c3 ca 4d dd 7e eb b9 d5 3a ab 49 94 13 13 dc df 06 51 6f b9 ca 1e ec 2a d8 0c be 90 c1 73 4b 7a 15 32 a1 a4 5d 6b f6 17 73 0e ad cd c1 47 aa 67 ce b7 60 33 cc 31 f8 c6 79 1d 61 f0 3d b2 e5 1b 61 c0 17 91 1d da 32 d3 48 aa 1b ad ad 49 b5 96 b7 3f a3 cd 60 0c 19 40 b7 24 58 a9 14 4a da b5 6e 86 3f 71 7e 55 c2 f0 e7 d8 d6 1f 8d 11 9f 49 11 d8 a9 b3 4e 35 c3 1a 83 2c 27 26 b8 bf 2d b2 de 72 5d 3d c0 ab 70 33 38 43 06 d1 2d 29 fe 22 16 4a da b5 76 86 45 71 7e 59 c2 b0 e8 c4 d6 a2 02 86 95 3a 45 a2 19 be 18 44 39 31 c1 fd 6d 10 f5 96 ab ec c1 ae 82 cd e0 0b 19 3c b7 a4 57 21 13 4a da b5 66 86 39 71 7e 51 c2 30 e7 70 6d ce e6 ee 84 8f b4 ee 6e 21 58 91 b3 32 ab 48 fc 6b a5 be 00 9b 6e d4 da 27 11 00 00 Data Ascii: ON@/lhikn4\f;q`JWpQ^AIoPGxjt^Hp{Z>RELfo4D+,Dx}\|{q;PQH^y{at 7RY+DHiN'x22@h4@&4\TT00_0A>XSw M~:IQo*sKz2]ksGg`31ya=a2HI?`@$XJn?q~UIN5,'&-r]=p38C-)"JvEq~Y:ED91m<W!Jf9q~Q0pmn!X2Hkn'
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 13 Oct 2024 15:51:45 GMTServer: ApacheUpgrade: h2,h2cConnection: Upgrade, Keep-AliveLast-Modified: Sat, 26 Nov 2022 14:31:26 GMTAccept-Ranges: bytesVary: Accept-EncodingContent-Encoding: gzipContent-Length: 286Keep-Alive: timeout=5, max=75Content-Type: text/cssData Raw: 1f 8b 08 00 00 00 00 00 00 03 55 50 dd 6a c3 20 14 be f7 29 84 31 58 21 06 6d 92 76 d5 ab 5e 74 ef 61 a2 4d 0e b3 2a c6 92 ac 63 ef be 93 8c 6c 0c 11 3c e7 7c 3f e7 b3 b4 29 85 e4 42 0f 9e 7e 92 56 77 ef 7d 0a 77 6f 58 17 5c 48 92 3e bd 9d 2f a7 73 a5 48 0c 23 64 08 5e 52 dd 8e c1 dd b3 55 64 02 93 07 79 e4 cf 8a dc 74 42 09 e6 ec 35 4b ca aa 23 b6 da 90 8c 4d 2c 69 03 f7 51 d2 26 ce 8a fc cc 9b 3d 8e a3 36 06 7c 2f a9 b0 b7 0d 8c 45 9c 29 ca 83 a1 a9 6f f5 8b 78 6d 0a 51 9f 0a 51 f0 b2 3e ee 16 dc cc c6 41 9b 30 49 ca 11 8b aa 54 2c 8f 3d de 95 c2 8b f5 94 62 f7 bb 55 0e 51 d2 d3 e2 ff 67 ba ae b3 85 6c 78 75 a9 b8 22 d7 e0 33 9b 2c f4 03 6e 59 73 ec 64 3b 67 a6 1d f4 18 bc b3 3e db a4 c8 83 81 37 76 46 91 8d 32 c2 c3 6e 9a ce 66 44 b1 31 ea 6e 75 62 bc e4 e2 b0 64 fc a7 de f0 8d 7c d5 37 70 1f f8 af 09 b4 53 e4 8b 7e 03 1b d6 07 a2 94 01 00 00 Data Ascii: UPj )1X!mv^taM*cl<\|?)B~Vw}woX\H>/sH#d^RUdytB5K#M,iQ&=6\|/E)oxmQQ>A0IT,=bUQglxu"3,nYsd;g>7vF2nfD1nubd\|7pS~

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=7T7wLrOWYAp4Pxm&MD=G9egVCbR HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /sls/ping HTTP/1.1Connection: Keep-AliveUser-Agent: DNS resiliency checker/1.0Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=7T7wLrOWYAp4Pxm&MD=G9egVCbR HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=7T7wLrOWYAp4Pxm&MD=G9egVCbR HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule90401v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /icloud-archivos/code2022esp.php HTTP/1.1Host: mail.findmy-ld.helpConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icloud-archivos/fonts.css HTTP/1.1Host: mail.findmy-ld.helpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://mail.findmy-ld.help/icloud-archivos/code2022esp.phpAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icloud-archivos/app.css HTTP/1.1Host: mail.findmy-ld.helpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://mail.findmy-ld.help/icloud-archivos/code2022esp.phpAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icloud-archivos/style.css HTTP/1.1Host: mail.findmy-ld.helpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://mail.findmy-ld.help/icloud-archivos/code2022esp.phpAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/img/ajax-loader.gif HTTP/1.1Host: mail.findmy-ld.helpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://mail.findmy-ld.help/icloud-archivos/code2022esp.phpAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sep.png HTTP/1.1Host: mail.findmy-ld.helpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://mail.findmy-ld.help/icloud-archivos/code2022esp.phpAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icloud-archivos/myriad-set-pro_thin.woff HTTP/1.1Host: mail.findmy-ld.helpConnection: keep-aliveOrigin: http://mail.findmy-ld.helpUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://mail.findmy-ld.help/icloud-archivos/fonts.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icloud-archivos/myriad-set-pro_text.woff HTTP/1.1Host: mail.findmy-ld.helpConnection: keep-aliveOrigin: http://mail.findmy-ld.helpUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://mail.findmy-ld.help/icloud-archivos/fonts.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icloud-archivos/myriad-set-pro_text.ttf HTTP/1.1Host: mail.findmy-ld.helpConnection: keep-aliveOrigin: http://mail.findmy-ld.helpUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://mail.findmy-ld.help/icloud-archivos/fonts.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icloud-archivos/myriad-set-pro_thin.ttf HTTP/1.1Host: mail.findmy-ld.helpConnection: keep-aliveOrigin: http://mail.findmy-ld.helpUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://mail.findmy-ld.help/icloud-archivos/fonts.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sep.png HTTP/1.1Host: mail.findmy-ld.helpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/img/ajax-loader.gif HTTP/1.1Host: mail.findmy-ld.helpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: mail.findmy-ld.helpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://mail.findmy-ld.help/icloud-archivos/code2022esp.phpAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: mail.findmy-ld.helpConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: mail.findmy-ld.help
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: 15.164.165.52.in-addr.arpa

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 13 Oct 2024 15:51:46 GMTServer: ApacheLast-Modified: Wed, 24 May 2023 01:50:54 GMTAccept-Ranges: bytesVary: Accept-EncodingContent-Encoding: gzipContent-Length: 4677Keep-Alive: timeout=5, max=74Connection: Keep-AliveContent-Type: text/htmlData Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 52 6d 73 d3 c8 96 fe 0c bf e2 8c 73 67 80 aa d8 4a 26 61 76 b0 15 df 82 90 0c b9 05 24 9b 84 e5 4e 6d ed 52 6d e9 48 ea 49 ab 8f e8 6e d9 d6 4d cd fe f6 3d dd 92 5f 63 b8 70 77 0d b1 a5 7e 79 ce f3 16 ff f0 fa f2 f4 f6 f7 ab 33 28 5c a9 e0 ea c3 ab b7 17 a7 d0 eb 47 d1 c7 a3 d3 28 7a 7d fb 1a fe fe e6 f6 dd 5b 38 1c 1c c0 8d 33 32 71 51 74 f6 be 07 bd c2 b9 6a 18 45 b3 d9 6c 30 3b 1a 90 c9 a3 db eb 68 ee 51 0e fd b5 ee b1 6f c3 9d 41 ea d2 de f8 71 1c 86 cc 4b a5 ed c9 0e 80 c3 17 2f 5e b4 f7 7a fe d0 50 09 9d 9f f4 50 f7 60 f9 e4 31 50 a4 50 19 ca a4 c2 25 4a 5e 56 79 c0 98 67 3a 3a 3c e4 73 d0 7d e2 12 9d 00 7f ac 8f 9f 6b 39 3d e9 9d 92 76 a8 5d ff b6 a9 b0 07 49 fb 76 d2 73 38 77 91 1f 3e 82 a4 10 c6 a2 3b a9 5d d6 ff b5 07 d1 1a 9a 93 4e e1 f8 f8 e0 18 fa 70 f5 f2 b7 33 78 7f 79 0b e7 97 1f de bf 8e a3 76 ef f1 e3 47 fc 89 7f e8 f7 e1 65 9a c2 8d 92 29 c2 65 ed 2c f4 fb e3 76 cf 26 46 56 0e ac 49 96 02 12 4a 71 f0 c7 e7 1a 4d 33 48 a8 8c da c7 fe d1 e0 68 70 38 28 a5 1e fc 61 7b e3 38 6a 6f 8e 17 74 1e c2 45 49 2e fb b6 b1 d1 1f 36 b2 b2 ac 14 f6 71 5e 09 9d 3e 04 59 8a 5a a9 b3 ae 51 08 8e 8d e9 fc 48 ac 5d f3 72 42 69 73 5f 89 34 95 3a 1f 1e 8c 4a 61 72 a9 f9 21 63 0f fb 99 28 a5 6a 86 05 aa 29 3a 99 88 d1 9f cb 7b 7b de 64 21 35 9a fb ee ce cf 07 d5 1c 44 ed 68 34 93 a9 2b 86 bf fe f2 6b 35 df 79 03 f6 1c 55 ec f7 fd 44 24 77 b9 a1 5a a7 7d 59 8a 1c 87 b5 51 4f 9f 2c f5 86 35 1b f1 49 3e ff 69 36 f8 a3 ca 9f 3c 1b ad 5d 32 58 a1 70 43 4d dd d3 c6 e4 02 65 5e b8 e1 e1 57 68 94 32 fd 2e 1a 7c 7e 90 cb 6c 27 89 f6 a7 df 7c 83 fa 76 2c ec e5 c2 91 99 90 73 54 de 57 64 a5 93 a4 19 47 09 27 a7 38 52 98 b9 e1 d1 0b 46 c9 14 f1 00 ff fe 4f 00 e7 f3 f9 fd da e1 45 ac c7 3e 99 a3 17 ff c6 df 87 fc 38 82 2e b1 90 56 fb d5 3f 5c a4 f7 f5 09 7e 09 b5 5b 9f e2 4b d5 17 4a e6 7a 98 f0 16 9a ef 70 a0 83 83 3d 34 86 4c 42 29 de 87 e2 59 f9 0f 1c 1e 79 ae e1 75 d6 46 f9 eb c1 c1 b7 e2 4d 84 de ae e6 01 ff fb d6 eb 05 59 87 e9 a4 b9 df 1e bf 62 f7 f3 f3 05 3b eb 1a 85 43 e9 d8 83 64 b4 35 f1 5b 07 26 54 57 a4 ef 13 52 64 86 7b 2f 5f 1d 1c 6c 0e fb 79 e7 b0 6f 04 cf d1 59 27 0c 2b 02 f1 c5 11 47 87 3b 47 fc 8b fe af 8d 5c 84 e0 fd 3f 7a fe c5 4a 4c c8 39 2a 19 e5 7e 22 92 bb dc 50 ad d3 be 2c 45 8e c3 da a8 a7 4f a2 24 97 7d db d8 28 ac d9 88 4f b6 57 06 b9 cc 9e 3c 1b ad dd 32 58 21 b7 53 53 f7 b4 51 c8 a2 d5 72 78 fc ed e5 cc c4 e7 4f ab fd 85 1e 78 1e 22 0e df 23 a8 44 9a 4a 9d 0f e1 b0 4d be fd 19 41 a2 50 98 21 33 2d be 75 9a 48 12 32 a9 e4 36 ac c2 81 17 07 3f 8e a0 95 01 bf 3c 67 ec 11 94 52 f7 3b 31 3c ad 5d ea 98 1d 80 a8 1d 8d c0 e1 dc f5 39 c6 9c d7 12 06 47 f3 dd 24 a0 56 70 bf 8e a3 30 73 df 8f 42 bb 51 1e 3d fa 66
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 13 Oct 2024 15:51:46 GMTServer: ApacheLast-Modified: Wed, 24 May 2023 01:50:54 GMTAccept-Ranges: bytesVary: Accept-EncodingContent-Encoding: gzipContent-Length: 4677Keep-Alive: timeout=5, max=74Connection: Keep-AliveContent-Type: text/htmlData Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 52 6d 73 d3 c8 96 fe 0c bf e2 8c 73 67 80 aa d8 4a 26 61 76 b0 15 df 82 90 0c b9 05 24 9b 84 e5 4e 6d ed 52 6d e9 48 ea 49 ab 8f e8 6e d9 d6 4d cd fe f6 3d dd 92 5f 63 b8 70 77 0d b1 a5 7e 79 ce f3 16 ff f0 fa f2 f4 f6 f7 ab 33 28 5c a9 e0 ea c3 ab b7 17 a7 d0 eb 47 d1 c7 a3 d3 28 7a 7d fb 1a fe fe e6 f6 dd 5b 38 1c 1c c0 8d 33 32 71 51 74 f6 be 07 bd c2 b9 6a 18 45 b3 d9 6c 30 3b 1a 90 c9 a3 db eb 68 ee 51 0e fd b5 ee b1 6f c3 9d 41 ea d2 de f8 71 1c 86 cc 4b a5 ed c9 0e 80 c3 17 2f 5e b4 f7 7a fe d0 50 09 9d 9f f4 50 f7 60 f9 e4 31 50 a4 50 19 ca a4 c2 25 4a 5e 56 79 c0 98 67 3a 3a 3c e4 73 d0 7d e2 12 9d 00 7f ac 8f 9f 6b 39 3d e9 9d 92 76 a8 5d ff b6 a9 b0 07 49 fb 76 d2 73 38 77 91 1f 3e 82 a4 10 c6 a2 3b a9 5d d6 ff b5 07 d1 1a 9a 93 4e e1 f8 f8 e0 18 fa 70 f5 f2 b7 33 78 7f 79 0b e7 97 1f de bf 8e a3 76 ef f1 e3 47 fc 89 7f e8 f7 e1 65 9a c2 8d 92 29 c2 65 ed 2c f4 fb e3 76 cf 26 46 56 0e ac 49 96 02 12 4a 71 f0 c7 e7 1a 4d 33 48 a8 8c da c7 fe d1 e0 68 70 38 28 a5 1e fc 61 7b e3 38 6a 6f 8e 17 74 1e c2 45 49 2e fb b6 b1 d1 1f 36 b2 b2 ac 14 f6 71 5e 09 9d 3e 04 59 8a 5a a9 b3 ae 51 08 8e 8d e9 fc 48 ac 5d f3 72 42 69 73 5f 89 34 95 3a 1f 1e 8c 4a 61 72 a9 f9 21 63 0f fb 99 28 a5 6a 86 05 aa 29 3a 99 88 d1 9f cb 7b 7b de 64 21 35 9a fb ee ce cf 07 d5 1c 44 ed 68 34 93 a9 2b 86 bf fe f2 6b 35 df 79 03 f6 1c 55 ec f7 fd 44 24 77 b9 a1 5a a7 7d 59 8a 1c 87 b5 51 4f 9f 2c f5 86 35 1b f1 49 3e ff 69 36 f8 a3 ca 9f 3c 1b ad 5d 32 58 a1 70 43 4d dd d3 c6 e4 02 65 5e b8 e1 e1 57 68 94 32 fd 2e 1a 7c 7e 90 cb 6c 27 89 f6 a7 df 7c 83 fa 76 2c ec e5 c2 91 99 90 73 54 de 57 64 a5 93 a4 19 47 09 27 a7 38 52 98 b9 e1 d1 0b 46 c9 14 f1 00 ff fe 4f 00 e7 f3 f9 fd da e1 45 ac c7 3e 99 a3 17 ff c6 df 87 fc 38 82 2e b1 90 56 fb d5 3f 5c a4 f7 f5 09 7e 09 b5 5b 9f e2 4b d5 17 4a e6 7a 98 f0 16 9a ef 70 a0 83 83 3d 34 86 4c 42 29 de 87 e2 59 f9 0f 1c 1e 79 ae e1 75 d6 46 f9 eb c1 c1 b7 e2 4d 84 de ae e6 01 ff fb d6 eb 05 59 87 e9 a4 b9 df 1e bf 62 f7 f3 f3 05 3b eb 1a 85 43 e9 d8 83 64 b4 35 f1 5b 07 26 54 57 a4 ef 13 52 64 86 7b 2f 5f 1d 1c 6c 0e fb 79 e7 b0 6f 04 cf d1 59 27 0c 2b 02 f1 c5 11 47 87 3b 47 fc 8b fe af 8d 5c 84 e0 fd 3f 7a fe c5 4a 4c c8 39 2a 19 e5 7e 22 92 bb dc 50 ad d3 be 2c 45 8e c3 da a8 a7 4f a2 24 97 7d db d8 28 ac d9 88 4f b6 57 06 b9 cc 9e 3c 1b ad dd 32 58 21 b7 53 53 f7 b4 51 c8 a2 d5 72 78 fc ed e5 cc c4 e7 4f ab fd 85 1e 78 1e 22 0e df 23 a8 44 9a 4a 9d 0f e1 b0 4d be fd 19 41 a2 50 98 21 33 2d be 75 9a 48 12 32 a9 e4 36 ac c2 81 17 07 3f 8e a0 95 01 bf 3c 67 ec 11 94 52 f7 3b 31 3c ad 5d ea 98 1d 80 a8 1d 8d c0 e1 dc f5 39 c6 9c d7 12 06 47 f3 dd 24 a0 56 70 bf 8e a3 30 73 df 8f 42 bb 51 1e 3d fa 66
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 13 Oct 2024 15:51:46 GMTServer: ApacheLast-Modified: Wed, 24 May 2023 01:50:54 GMTAccept-Ranges: bytesVary: Accept-EncodingContent-Encoding: gzipContent-Length: 4677Keep-Alive: timeout=5, max=73Connection: Keep-AliveContent-Type: text/htmlData Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 52 6d 73 d3 c8 96 fe 0c bf e2 8c 73 67 80 aa d8 4a 26 61 76 b0 15 df 82 90 0c b9 05 24 9b 84 e5 4e 6d ed 52 6d e9 48 ea 49 ab 8f e8 6e d9 d6 4d cd fe f6 3d dd 92 5f 63 b8 70 77 0d b1 a5 7e 79 ce f3 16 ff f0 fa f2 f4 f6 f7 ab 33 28 5c a9 e0 ea c3 ab b7 17 a7 d0 eb 47 d1 c7 a3 d3 28 7a 7d fb 1a fe fe e6 f6 dd 5b 38 1c 1c c0 8d 33 32 71 51 74 f6 be 07 bd c2 b9 6a 18 45 b3 d9 6c 30 3b 1a 90 c9 a3 db eb 68 ee 51 0e fd b5 ee b1 6f c3 9d 41 ea d2 de f8 71 1c 86 cc 4b a5 ed c9 0e 80 c3 17 2f 5e b4 f7 7a fe d0 50 09 9d 9f f4 50 f7 60 f9 e4 31 50 a4 50 19 ca a4 c2 25 4a 5e 56 79 c0 98 67 3a 3a 3c e4 73 d0 7d e2 12 9d 00 7f ac 8f 9f 6b 39 3d e9 9d 92 76 a8 5d ff b6 a9 b0 07 49 fb 76 d2 73 38 77 91 1f 3e 82 a4 10 c6 a2 3b a9 5d d6 ff b5 07 d1 1a 9a 93 4e e1 f8 f8 e0 18 fa 70 f5 f2 b7 33 78 7f 79 0b e7 97 1f de bf 8e a3 76 ef f1 e3 47 fc 89 7f e8 f7 e1 65 9a c2 8d 92 29 c2 65 ed 2c f4 fb e3 76 cf 26 46 56 0e ac 49 96 02 12 4a 71 f0 c7 e7 1a 4d 33 48 a8 8c da c7 fe d1 e0 68 70 38 28 a5 1e fc 61 7b e3 38 6a 6f 8e 17 74 1e c2 45 49 2e fb b6 b1 d1 1f 36 b2 b2 ac 14 f6 71 5e 09 9d 3e 04 59 8a 5a a9 b3 ae 51 08 8e 8d e9 fc 48 ac 5d f3 72 42 69 73 5f 89 34 95 3a 1f 1e 8c 4a 61 72 a9 f9 21 63 0f fb 99 28 a5 6a 86 05 aa 29 3a 99 88 d1 9f cb 7b 7b de 64 21 35 9a fb ee ce cf 07 d5 1c 44 ed 68 34 93 a9 2b 86 bf fe f2 6b 35 df 79 03 f6 1c 55 ec f7 fd 44 24 77 b9 a1 5a a7 7d 59 8a 1c 87 b5 51 4f 9f 2c f5 86 35 1b f1 49 3e ff 69 36 f8 a3 ca 9f 3c 1b ad 5d 32 58 a1 70 43 4d dd d3 c6 e4 02 65 5e b8 e1 e1 57 68 94 32 fd 2e 1a 7c 7e 90 cb 6c 27 89 f6 a7 df 7c 83 fa 76 2c ec e5 c2 91 99 90 73 54 de 57 64 a5 93 a4 19 47 09 27 a7 38 52 98 b9 e1 d1 0b 46 c9 14 f1 00 ff fe 4f 00 e7 f3 f9 fd da e1 45 ac c7 3e 99 a3 17 ff c6 df 87 fc 38 82 2e b1 90 56 fb d5 3f 5c a4 f7 f5 09 7e 09 b5 5b 9f e2 4b d5 17 4a e6 7a 98 f0 16 9a ef 70 a0 83 83 3d 34 86 4c 42 29 de 87 e2 59 f9 0f 1c 1e 79 ae e1 75 d6 46 f9 eb c1 c1 b7 e2 4d 84 de ae e6 01 ff fb d6 eb 05 59 87 e9 a4 b9 df 1e bf 62 f7 f3 f3 05 3b eb 1a 85 43 e9 d8 83 64 b4 35 f1 5b 07 26 54 57 a4 ef 13 52 64 86 7b 2f 5f 1d 1c 6c 0e fb 79 e7 b0 6f 04 cf d1 59 27 0c 2b 02 f1 c5 11 47 87 3b 47 fc 8b fe af 8d 5c 84 e0 fd 3f 7a fe c5 4a 4c c8 39 2a 19 e5 7e 22 92 bb dc 50 ad d3 be 2c 45 8e c3 da a8 a7 4f a2 24 97 7d db d8 28 ac d9 88 4f b6 57 06 b9 cc 9e 3c 1b ad dd 32 58 21 b7 53 53 f7 b4 51 c8 a2 d5 72 78 fc ed e5 cc c4 e7 4f ab fd 85 1e 78 1e 22 0e df 23 a8 44 9a 4a 9d 0f e1 b0 4d be fd 19 41 a2 50 98 21 33 2d be 75 9a 48 12 32 a9 e4 36 ac c2 81 17 07 3f 8e a0 95 01 bf 3c 67 ec 11 94 52 f7 3b 31 3c ad 5d ea 98 1d 80 a8 1d 8d c0 e1 dc f5 39 c6 9c d7 12 06 47 f3 dd 24 a0 56 70 bf 8e a3 30 73 df 8f 42 bb 51 1e 3d fa 66
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 13 Oct 2024 15:51:46 GMTServer: ApacheLast-Modified: Wed, 24 May 2023 01:50:54 GMTAccept-Ranges: bytesVary: Accept-EncodingContent-Encoding: gzipContent-Length: 4677Keep-Alive: timeout=5, max=73Connection: Keep-AliveContent-Type: text/htmlData Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 52 6d 73 d3 c8 96 fe 0c bf e2 8c 73 67 80 aa d8 4a 26 61 76 b0 15 df 82 90 0c b9 05 24 9b 84 e5 4e 6d ed 52 6d e9 48 ea 49 ab 8f e8 6e d9 d6 4d cd fe f6 3d dd 92 5f 63 b8 70 77 0d b1 a5 7e 79 ce f3 16 ff f0 fa f2 f4 f6 f7 ab 33 28 5c a9 e0 ea c3 ab b7 17 a7 d0 eb 47 d1 c7 a3 d3 28 7a 7d fb 1a fe fe e6 f6 dd 5b 38 1c 1c c0 8d 33 32 71 51 74 f6 be 07 bd c2 b9 6a 18 45 b3 d9 6c 30 3b 1a 90 c9 a3 db eb 68 ee 51 0e fd b5 ee b1 6f c3 9d 41 ea d2 de f8 71 1c 86 cc 4b a5 ed c9 0e 80 c3 17 2f 5e b4 f7 7a fe d0 50 09 9d 9f f4 50 f7 60 f9 e4 31 50 a4 50 19 ca a4 c2 25 4a 5e 56 79 c0 98 67 3a 3a 3c e4 73 d0 7d e2 12 9d 00 7f ac 8f 9f 6b 39 3d e9 9d 92 76 a8 5d ff b6 a9 b0 07 49 fb 76 d2 73 38 77 91 1f 3e 82 a4 10 c6 a2 3b a9 5d d6 ff b5 07 d1 1a 9a 93 4e e1 f8 f8 e0 18 fa 70 f5 f2 b7 33 78 7f 79 0b e7 97 1f de bf 8e a3 76 ef f1 e3 47 fc 89 7f e8 f7 e1 65 9a c2 8d 92 29 c2 65 ed 2c f4 fb e3 76 cf 26 46 56 0e ac 49 96 02 12 4a 71 f0 c7 e7 1a 4d 33 48 a8 8c da c7 fe d1 e0 68 70 38 28 a5 1e fc 61 7b e3 38 6a 6f 8e 17 74 1e c2 45 49 2e fb b6 b1 d1 1f 36 b2 b2 ac 14 f6 71 5e 09 9d 3e 04 59 8a 5a a9 b3 ae 51 08 8e 8d e9 fc 48 ac 5d f3 72 42 69 73 5f 89 34 95 3a 1f 1e 8c 4a 61 72 a9 f9 21 63 0f fb 99 28 a5 6a 86 05 aa 29 3a 99 88 d1 9f cb 7b 7b de 64 21 35 9a fb ee ce cf 07 d5 1c 44 ed 68 34 93 a9 2b 86 bf fe f2 6b 35 df 79 03 f6 1c 55 ec f7 fd 44 24 77 b9 a1 5a a7 7d 59 8a 1c 87 b5 51 4f 9f 2c f5 86 35 1b f1 49 3e ff 69 36 f8 a3 ca 9f 3c 1b ad 5d 32 58 a1 70 43 4d dd d3 c6 e4 02 65 5e b8 e1 e1 57 68 94 32 fd 2e 1a 7c 7e 90 cb 6c 27 89 f6 a7 df 7c 83 fa 76 2c ec e5 c2 91 99 90 73 54 de 57 64 a5 93 a4 19 47 09 27 a7 38 52 98 b9 e1 d1 0b 46 c9 14 f1 00 ff fe 4f 00 e7 f3 f9 fd da e1 45 ac c7 3e 99 a3 17 ff c6 df 87 fc 38 82 2e b1 90 56 fb d5 3f 5c a4 f7 f5 09 7e 09 b5 5b 9f e2 4b d5 17 4a e6 7a 98 f0 16 9a ef 70 a0 83 83 3d 34 86 4c 42 29 de 87 e2 59 f9 0f 1c 1e 79 ae e1 75 d6 46 f9 eb c1 c1 b7 e2 4d 84 de ae e6 01 ff fb d6 eb 05 59 87 e9 a4 b9 df 1e bf 62 f7 f3 f3 05 3b eb 1a 85 43 e9 d8 83 64 b4 35 f1 5b 07 26 54 57 a4 ef 13 52 64 86 7b 2f 5f 1d 1c 6c 0e fb 79 e7 b0 6f 04 cf d1 59 27 0c 2b 02 f1 c5 11 47 87 3b 47 fc 8b fe af 8d 5c 84 e0 fd 3f 7a fe c5 4a 4c c8 39 2a 19 e5 7e 22 92 bb dc 50 ad d3 be 2c 45 8e c3 da a8 a7 4f a2 24 97 7d db d8 28 ac d9 88 4f b6 57 06 b9 cc 9e 3c 1b ad dd 32 58 21 b7 53 53 f7 b4 51 c8 a2 d5 72 78 fc ed e5 cc c4 e7 4f ab fd 85 1e 78 1e 22 0e df 23 a8 44 9a 4a 9d 0f e1 b0 4d be fd 19 41 a2 50 98 21 33 2d be 75 9a 48 12 32 a9 e4 36 ac c2 81 17 07 3f 8e a0 95 01 bf 3c 67 ec 11 94 52 f7 3b 31 3c ad 5d ea 98 1d 80 a8 1d 8d c0 e1 dc f5 39 c6 9c d7 12 06 47 f3 dd 24 a0 56 70 bf 8e a3 30 73 df 8f 42 bb 51 1e 3d fa 66

Source: unknown	Network traffic detected: HTTP traffic on port 56492 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56566 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56623 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56589 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56600 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56537 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56514 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56617 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56554 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56606
Source: unknown	Network traffic detected: HTTP traffic on port 56497 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56525 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56607
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56608
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56609
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56602
Source: unknown	Network traffic detected: HTTP traffic on port 56508 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56603
Source: unknown	Network traffic detected: HTTP traffic on port 56560 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56604
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56605
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56600
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56601
Source: unknown	Network traffic detected: HTTP traffic on port 56543 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56628 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56595 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56486 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56519 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56578 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56612 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56617
Source: unknown	Network traffic detected: HTTP traffic on port 56507 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56532 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56618
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56619
Source: unknown	Network traffic detected: HTTP traffic on port 56475 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56613
Source: unknown	Network traffic detected: HTTP traffic on port 56498 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56614
Source: unknown	Network traffic detected: HTTP traffic on port 56606 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56615
Source: unknown	Network traffic detected: HTTP traffic on port 56561 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56616
Source: unknown	Network traffic detected: HTTP traffic on port 56549 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56610
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56611
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56612
Source: unknown	Network traffic detected: HTTP traffic on port 56481 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56629 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56577 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56594 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56507
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56628
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56508
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56629
Source: unknown	Network traffic detected: HTTP traffic on port 56502 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56509
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56503
Source: unknown	Network traffic detected: HTTP traffic on port 56583 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56624
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56504
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56625
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56626
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56506
Source: unknown	Network traffic detected: HTTP traffic on port 56544 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56627
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56620
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56500
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56621
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56501
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56622
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56502
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56623
Source: unknown	Network traffic detected: HTTP traffic on port 56538 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56601 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56630
Source: unknown	Network traffic detected: HTTP traffic on port 56513 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56572 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56555 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56576 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56599 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56553 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56530 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56509 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56582 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56547 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56477
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56598
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56478
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56599
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56479
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56484
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56485
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56486
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56487
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56480
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56481
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56482
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56483
Source: unknown	Network traffic detected: HTTP traffic on port 56521 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56487 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56630 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56613 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56493 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56607 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56504 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56488
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56489
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56495
Source: unknown	Network traffic detected: HTTP traffic on port 56515 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56564 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56588 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56482 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56496
Source: unknown	Network traffic detected: HTTP traffic on port 56624 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56497
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56498
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56491
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56492
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56493
Source: unknown	Network traffic detected: HTTP traffic on port 56618 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56494
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56490
Source: unknown	Network traffic detected: HTTP traffic on port 56536 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56570 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56503 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56526 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56494 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56499
Source: unknown	Network traffic detected: HTTP traffic on port 56602 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56471 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56565 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56542 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56625 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56619 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56571 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56598 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 56531 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 56499 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56548 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56587 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56520 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56488 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 56559 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56593 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56528 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56614 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56608 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56558
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56559
Source: unknown	Network traffic detected: HTTP traffic on port 56477 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56620 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56554
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56555
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56556
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56557
Source: unknown	Network traffic detected: HTTP traffic on port 56586 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56540 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56561
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56562
Source: unknown	Network traffic detected: HTTP traffic on port 56483 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56563 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56563
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56564
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56560
Source: unknown	Network traffic detected: HTTP traffic on port 56592 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56500 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56489 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56546 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56569
Source: unknown	Network traffic detected: HTTP traffic on port 56603 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56472 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56565
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56566
Source: unknown	Network traffic detected: HTTP traffic on port 56581 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56567
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56568
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56572
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56573
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56574
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56575
Source: unknown	Network traffic detected: HTTP traffic on port 56511 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56570
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56571
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56557 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56574 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56522 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56576
Source: unknown	Network traffic detected: HTTP traffic on port 56580 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56490 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56577
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56578
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56579
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56583
Source: unknown	Network traffic detected: HTTP traffic on port 56516 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56584
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56585
Source: unknown	Network traffic detected: HTTP traffic on port 56478 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56586
Source: unknown	Network traffic detected: HTTP traffic on port 56621 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56580
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56581
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56582
Source: unknown	Network traffic detected: HTTP traffic on port 56558 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56535 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56575 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56527 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56552 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56495 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56615 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56609 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56510 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56587
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56588
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56589
Source: unknown	Network traffic detected: HTTP traffic on port 56569 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56473
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56594
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56474
Source: unknown	Network traffic detected: HTTP traffic on port 56541 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56595
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56475
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56596
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56476
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56597
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56590
Source: unknown	Network traffic detected: HTTP traffic on port 56626 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56591
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56471
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56592
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56472
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56593
Source: unknown	Network traffic detected: HTTP traffic on port 56484 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56597 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56610 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56496 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56518
Source: unknown	Network traffic detected: HTTP traffic on port 56501 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56519
Source: unknown	Network traffic detected: HTTP traffic on port 56524 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56514
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56515
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56516
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56517
Source: unknown	Network traffic detected: HTTP traffic on port 56604 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56510
Source: unknown	Network traffic detected: HTTP traffic on port 56473 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56511
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56512
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56513
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56520
Source: unknown	Network traffic detected: HTTP traffic on port 56518 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56627 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56533 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56579 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56556 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56573 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56596 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56529 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56529
Source: unknown	Network traffic detected: HTTP traffic on port 56550 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56525
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56526
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56527
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56528
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56521
Source: unknown	Network traffic detected: HTTP traffic on port 56567 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56522
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56523
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56524
Source: unknown	Network traffic detected: HTTP traffic on port 56585 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56479 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56530
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56531
Source: unknown	Network traffic detected: HTTP traffic on port 56591 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56551 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56536
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56537
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56538
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56539
Source: unknown	Network traffic detected: HTTP traffic on port 56545 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56532
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56533
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56534
Source: unknown	Network traffic detected: HTTP traffic on port 56584 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56535
Source: unknown	Network traffic detected: HTTP traffic on port 56568 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56539 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56540
Source: unknown	Network traffic detected: HTTP traffic on port 56590 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56541
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56542
Source: unknown	Network traffic detected: HTTP traffic on port 56512 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56485 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56611 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56506 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56523 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56547
Source: unknown	Network traffic detected: HTTP traffic on port 56605 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56474 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56548
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56549
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56543
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56544
Source: unknown	Network traffic detected: HTTP traffic on port 56491 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56545
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56546
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56550
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56551
Source: unknown	Network traffic detected: HTTP traffic on port 56517 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56552
Source: unknown	Network traffic detected: HTTP traffic on port 56622 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56553
Source: unknown	Network traffic detected: HTTP traffic on port 56562 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56534 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56616 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56480 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.4:56471 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.4:56472 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.4:56473 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:56474 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:56586 version: TLS 1.2

Source: classification engine

Classification label: mal68.phis.win@16/22@8/6

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2264 --field-trial-handle=2216,i,12730649350140849657,17270425858010476698,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://mail.findmy-ld.help/icloud-archivos/code2022esp.php"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2264 --field-trial-handle=2216,i,12730649350140849657,17270425858010476698,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	4 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://mail.findmy-ld.help/icloud-archivos/code2022esp.php	5%	Virustotal		Browse
http://mail.findmy-ld.help/icloud-archivos/code2022esp.php	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Link
www.google.com	0%	Virustotal	Browse
15.164.165.52.in-addr.arpa	0%	Virustotal	Browse
mail.findmy-ld.help	5%	Virustotal	Browse
fp2e7a.wpc.phicdn.net	0%	Virustotal	Browse
s-part-0017.t-0009.t-msedge.net	0%	Virustotal	Browse

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	0%, Virustotal, Browse	unknown
www.google.com	142.250.185.196	true	false	0%, Virustotal, Browse	unknown
mail.findmy-ld.help	50.6.138.164	true	false	5%, Virustotal, Browse	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	0%, Virustotal, Browse	unknown
15.164.165.52.in-addr.arpa	unknown	unknown	false	0%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Reputation
http://mail.findmy-ld.help/icloud-archivos/myriad-set-pro_thin.woff	false	unknown
http://mail.findmy-ld.help/sep.png	false	unknown
http://mail.findmy-ld.help/icloud-archivos/code2022esp.php	true	unknown
http://mail.findmy-ld.help/icloud-archivos/fonts.css	false	unknown
http://mail.findmy-ld.help/icloud-archivos/app.css	false	unknown
http://mail.findmy-ld.help/icloud-archivos/myriad-set-pro_text.woff	false	unknown
http://mail.findmy-ld.help/icloud-archivos/myriad-set-pro_thin.ttf	false	unknown
http://mail.findmy-ld.help/favicon.ico	false	unknown
http://mail.findmy-ld.help/icloud-archivos/myriad-set-pro_text.ttf	false	unknown
http://mail.findmy-ld.help/icloud-archivos/style.css	false	unknown
http://mail.findmy-ld.help/assets/img/ajax-loader.gif	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
216.58.212.132	unknown	United States	15169	GOOGLEUS	false
50.6.138.164	mail.findmy-ld.help	United States	46606	UNIFIEDLAYER-AS-1US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.196	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4
192.168.2.6

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1532577
Start date and time:	2024-10-13 17:50:45 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 6s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://mail.findmy-ld.help/icloud-archivos/code2022esp.php
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal68.phis.win@16/22@8/6
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.46, 142.251.173.84, 142.250.186.131, 34.104.35.123, 142.250.186.106, 142.250.185.106, 142.250.186.170, 142.250.185.138, 142.250.184.202, 142.250.181.234, 142.250.185.74, 142.250.185.170, 142.250.184.234, 216.58.206.42, 216.58.206.74, 172.217.18.106, 172.217.16.202, 216.58.212.170, 142.250.185.234, 142.250.185.202, 199.232.214.172, 192.229.221.95, 20.3.187.198, 52.165.164.15, 142.250.186.99
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ajax.googleapis.com, otelrules.azureedge.net, otelrules.afd.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, update.googleapis.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: http://mail.findmy-ld.help/icloud-archivos/code2022esp.php Model: gemini-1.5-flash	{ "text": "Ingrese el cdigo de desbloqueo del dispositivo Ingrese su cdigo de desbloqueo para ver la ubicacin actual de tus dispositivos", "contains_trigger_text": true, "trigger_text": "Ingrese el cdigo de desbloqueo del dispositivo", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_qrcode": false, "has_visible_captcha": false, "has_urgent_text": false}

URL: http://mail.findmy-ld.help/icloud-archivos/code2022esp.php Model: jbxai	{ "brands":[], "text":"Ingresar el cdigo de desbloqueo del dispositivo", "contains_trigger_text":true, "trigger_text":"Ingresar el cdigo de desbloqueo del dispositivo", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: http://mail.findmy-ld.help/icloud-archivos/code2022esp.php Model: gemini-1.5-flash	{ "brands": []}
	{ "brands": []}

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 47

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 4391
Category:	downloaded
Size (bytes):	478
Entropy (8bit):	7.513782066941152
Encrypted:	false
SSDEEP:	12:XviJMf980VmeqMMTTaFboWdrMdMUExD6//CM14r0:XvDlrVmGMOboWOM4Ir0
MD5:	C746FC3127CFA3EB80C0B4E37C0A3809
SHA1:	C236B3E78037531CC16970D3FDD3755E629CA7E7
SHA-256:	05D139E2C2F90C5F47DCFE620F12235F292FB9BFED7CA69DF83E400C808D2EC7
SHA-512:	26CFDAFEB59886EEFA24D98740C0EC2C03945D6A63EF3C3E91E2269F8BE8DC1920FDD4B8D05972F99705C75E0B6B6B9E08135AC696E3F80408EB071EF89C02D5
Malicious:	false
Reputation:	low
URL:	http://mail.findmy-ld.help/icloud-archivos/fonts.css
Preview:	...........ON.@...../lh.ik.n4.\....f..;q`..J.Wp.Q....^A...I.........o..P...Gxj...t.^.....Hp..{Z>....REL.f..o.4....D+.,..D..x}.\|{q;..P....Q...H^....y.{.a.t .7R.Y.+.D....Hi.N'.x...2.2..@....h4..@....&.4\.T.T.0....0._.0A..>......X..Sw ..M.~..:.I......Qo....*.....sKz.2..]k..s....G.g.`3.1..y.a.=...a.....2.H....I...?..`..@.$X..J.n.?q~U.........I...N5...,'&..-..r]=..p38C..-).".J.v.Eq~Y.......:E....D91..m............<..W!.J.f.9q~Q.0.pm.....n!X..2.H.k....n..'...

Chrome Cache Entry: 48

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 82736
Category:	downloaded
Size (bytes):	19063
Entropy (8bit):	7.980853600738599
Encrypted:	false
SSDEEP:	384:TvfIAy2mTqa+D3MxbWlu/3hCih2NmFnO6y6yhIybA0geonVx5WPrxXF:DLy2mTj+D3Bls3hC1NSWk0gR5yxXF
MD5:	A9C38D6EA5B19E01F836A181355F8EAC
SHA1:	48DB47805747E2F2D49C3B532331C2F77975929B
SHA-256:	3DF622AAD9A8AD1F0A5E5AE96E980DC14363DB3A47315D7806D46C6B0FE2D209
SHA-512:	748956F252133CCF57B04799894D1ED61433A4B9476E87BF0D9B512563248D5C150939DAB18FFC4F7522887EF1A2199C5284568BC09E349D56045A22AE1DAD21
Malicious:	false
Reputation:	low
URL:	http://mail.findmy-ld.help/icloud-archivos/app.css
Preview:	.............-.;.).H..A...D.T.<u.?.6.s...r..J.$.)R ..#.y.}6).,.vD.9...as....{..<...w...e.d.%.4..i.X....52.`.f..a..6q...'[..d..$....$/vB.U.D....+.RN.?`...G........S\.&..\+(fR...?......d]=~(1.TIE..A......M..K.....+.a...t.......R,.1...........^.......gjuc.0g9,.`M-.D..i...pN%.....&.......N.`.P...%......9...n/.J%.......0.,.p.g{.. ...X...'..f....#....i.,......LIc .....1'.V."y.!.8..y.0..8Q.EtBD.`N./^ fOkZ...q..3.>f....}?.a..%...y.N.Vu]...+.Z...]%5....E..p.kV..FVq......m........t...........b....A....X^+...f..l.V..a>.-...........q.... \...$..]B.-.....3\2.q,.....>.>~..9j7Nj..x..DU....2...x)...q?...uk...U....cZ<....L.....f....!...T.....-L.....y...M..{.A.......\|/...AhO..3.W..0/..4T6..v.J2pHy....1.'.{R...Hm7..........e2.5bBP.....RxWaB\h.....YG]t.......;-h.........9.X6c.T..m.E]&T.....1.r.+&P/V...6..........VZL{h..1...R)....l5.y....r..]&{.M..5..I<f...^G.!.3.\|LC..{.X.L.....{2[.h..=.....4..\....V.[.\|.*.r.]V&W..l9.....1....6..!(...JS{...cMW8.g....

Chrome Cache Entry: 49

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 4 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel
Category:	downloaded
Size (bytes):	9062
Entropy (8bit):	3.284224550667547
Encrypted:	false
SSDEEP:	48:z87CC6NTQ8Om4F/POAVpSVyvFElSfwa89A4:ACC6NTEmAGAVcLSfwa8N
MD5:	28EC4EABA5AE210B98A11257CAF5BADE
SHA1:	6164148A39D6A27286641896FCE3B76F439AEAB1
SHA-256:	3F5086612AAE9363C9FB02949219CEF19854C18FE5AD4EDA78AA1AEFCC79CC71
SHA-512:	4EFB48689296863D6E05B3CF32F8F98AC57A2BDEAE09209735170DD7F1C70E22A9BD2FBE93FCCB7181B8C1B6DFE555AF548129EF7B8705ED50486A972815868E
Malicious:	false
Reputation:	low
URL:	http://mail.findmy-ld.help/favicon.ico
Preview:	...... ..........F...........h....... .... .....V......... .h.......(... ...@...............................BBB.....rrr.....ZZZ.............NNN.~~~.fff.................JJJ.....zzz.bbb.VVV.....nnn.........FFF.....vvv.....^^^.............RRR.....jjj...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 50

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 382 x 50, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1240
Entropy (8bit):	7.76387952763145
Encrypted:	false
SSDEEP:	24:6wss9YhvQELfVIWf1W9jKNhW0i9i3rhrk58hsUY:6wss9OFLfOWsqWbidrkaA
MD5:	AFE4BC3227B4889FC78A8181E014A931
SHA1:	E3FF6C0083FBEDED76E33ACE08BACAC04E7AD35B
SHA-256:	E39F78E3FD9428C8AD22060046D9CC07D65CF9FA784A16A3925B9ACB52F35C3D
SHA-512:	59A92FDEE85A7E47A8D2D0CF757BFFAD15187F5095F74E87CCD3074EB6FA9A18E3286ABD27919135C534A07E3BA350C6BCDDF974B77FE2D58AB5510964DAE8BB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...~...2........l....pHYs...........~.....PLTE....................tRNS....9.qb...^IDATh..Y..0..:.....u.._.Y#.....8.A...X.5....95.b..j.f.?...../V..?.:..'.gL.#..o.^S)%'y.....h.u....x...]].w.Qu.......V..u.7.K.U......b...W#.y.@.1. .r..\|-..Z.%.\|.....F$........k....-.......J. .h.{.....5@..5....L........\|D@...2..........(....\.......O..W.+...:...QB.4..../ ?K..(..x.....+ ..=....)...r.../...P...;....UX..-..t.&.T.....HD.[.aA.0.gz..F^...@OS.......vk,4...V~.A..c0. .;..j...o. A...(..........?:.R8...\|.Em..\|.~.......S......R.!.MBk..i..>\|.\|.@....h....=J.c..-.......?.?..9...h...:...K.19..Pm..F..$...4..%.) ....0<n....Y.....$z..2^....u....E.T;..q..d.P.j..yQ.,.U..y.......dDm.`!..n.l..T..x?.....TC[.i.$.:.MC.......m.....`.W...Qc..t.Zf....k.z%...., .2.0...:3...{.6J........X..mDXiv.?..!p.{....46u......W=..k.y..LB...._.9....{1>...F.h.q....~z4.=:..{.7.o:.1..>.1..=..}+<<......Y'......,..P.....k..$...$.J"V.#.......f..{.....[.#.....WN.I.W...t....E.p..

Chrome Cache Entry: 51

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 382 x 50, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1240
Entropy (8bit):	7.76387952763145
Encrypted:	false
SSDEEP:	24:6wss9YhvQELfVIWf1W9jKNhW0i9i3rhrk58hsUY:6wss9OFLfOWsqWbidrkaA
MD5:	AFE4BC3227B4889FC78A8181E014A931
SHA1:	E3FF6C0083FBEDED76E33ACE08BACAC04E7AD35B
SHA-256:	E39F78E3FD9428C8AD22060046D9CC07D65CF9FA784A16A3925B9ACB52F35C3D
SHA-512:	59A92FDEE85A7E47A8D2D0CF757BFFAD15187F5095F74E87CCD3074EB6FA9A18E3286ABD27919135C534A07E3BA350C6BCDDF974B77FE2D58AB5510964DAE8BB
Malicious:	false
Reputation:	low
URL:	http://mail.findmy-ld.help/sep.png
Preview:	.PNG........IHDR...~...2........l....pHYs...........~.....PLTE....................tRNS....9.qb...^IDATh..Y..0..:.....u.._.Y#.....8.A...X.5....95.b..j.f.?...../V..?.:..'.gL.#..o.^S)%'y.....h.u....x...]].w.Qu.......V..u.7.K.U......b...W#.y.@.1. .r..\|-..Z.%.\|.....F$........k....-.......J. .h.{.....5@..5....L........\|D@...2..........(....\.......O..W.+...:...QB.4..../ ?K..(..x.....+ ..=....)...r.../...P...;....UX..-..t.&.T.....HD.[.aA.0.gz..F^...@OS.......vk,4...V~.A..c0. .;..j...o. A...(..........?:.R8...\|.Em..\|.~.......S......R.!.MBk..i..>\|.\|.@....h....=J.c..-.......?.?..9...h...:...K.19..Pm..F..$...4..%.) ....0<n....Y.....$z..2^....u....E.T;..q..d.P.j..yQ.,.U..y.......dDm.`!..n.l..T..x?.....TC[.i.$.:.MC.......m.....`.W...Qc..t.Zf....k.z%...., .2.0...:3...{.6J........X..mDXiv.?..!p.{....46u......W=..k.y..LB...._.9....{1>...F.h.q....~z4.=:..{.7.o:.1..>.1..=..}+<<......Y'......,..P.....k..$...$.J"V.#.......f..{.....[.#.....WN.I.W...t....E.p..

Chrome Cache Entry: 52

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 32 x 32
Category:	downloaded
Size (bytes):	4178
Entropy (8bit):	7.491119873175258
Encrypted:	false
SSDEEP:	48:3je4MHZKDtbvGOFkYajWVOwD2W4UYX084HY4zHdwU4zeoAF5R4JTp3uV04gBFy8g:3je4XtDlqWdWvfWJXPF5RcdU0dsmuS
MD5:	20295FD727FBC02635F3D8C947E54556
SHA1:	DE01015DB36A6330D4E0854A69555A5E3F3556C7
SHA-256:	93C99B1A62BDEF426C6029D8EEAA796AF079BD0B67C7BD67FDA444E8AFB6F562
SHA-512:	495A1766EC0560E31689C449AF356BDB88CD862784D9B4C7E2E3AD1E4345ED2EAE434FC15B3ECEAC04397E49C21AC52096B1434B465AB8D8A2DF2F0129820CF4
Malicious:	false
Reputation:	low
URL:	http://mail.findmy-ld.help/assets/img/ajax-loader.gif
Preview:	GIF89a . .........................~~~................................>>>VVV```\|\|\|......JJJlll...............,,,^^^...LLL.................................................................................!..NETSCAPE2.0.....!..Created with ajaxload.info.!.......,.... . ....@.pH$.8.Gq.$N..A.3(..L....V....K\|P(...:.(..r.B.._@X!/...BxBnb}E.g....o.r..E.g..^..oWD.c.....JC.g......oqm.o..........E.....{p~....r...D....}.M....d......K......r.........o....\|........].q...` 9C.f).$'.=..}.C.^.u..-.H..!.............O.K"1......5.&{j.T. .BBo..e...6..<...@.B?..1..)..G.b.K... .!.......,.... . ....@.pH$&4.Bq.$..D..b(.......V....[4.._..:.t:"r.qh@..a..)..g.Bk_.o..E.g~.....#r.JD.g.xl.oWF.C....~mg......o.D.....B.....w...K.!.......C........wE... ..d....X.............r................s'...xM.&T$$..\|M...C.... .A...Bl..d....K.d.V..?oFl-X. .L[.J*....6..!."...5\@....p..oI..m...N!Q.Xm..@..%2u:uH2.\.R.#.a..!.......,.... . ....@.pH$...Bq.$&.D...(..L....V....[$.....:4P(.r.s..._...I..g.BxB.o..E g.w^

Chrome Cache Entry: 53

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 404
Category:	downloaded
Size (bytes):	286
Entropy (8bit):	7.202571665522594
Encrypted:	false
SSDEEP:	6:XtbfW388Hmx9tyIo+q/tJcOiPaaPiSSso3k2XVHM4kll:XtWM8QrOp/IO4Do3k2XVVk/
MD5:	CB5A7254A701EDBA03B1AC2B4F5E4313
SHA1:	2C08907B89A2E04EBBDCC50FC99944B55C0F8CD0
SHA-256:	839909B0ED20B10587DC1034CFDF4A78215DA3E0B5C7674AEE2FDE3F1EFB8E39
SHA-512:	5B961F8E160E814786EB55BB856C14A5546B03F5D77AB78961753A4DF6C74E9EB61B501AE83D12944E33ED5C6C9066F16792829DA7E5F8AA5AEA8B91B8C56CB1
Malicious:	false
Reputation:	low
URL:	http://mail.findmy-ld.help/icloud-archivos/style.css
Preview:	..........UP.j. ...).1X!.m.v.^t.a.M..*..c..l..<.\|?.)..B..~.Vw.}.woX.\H.>../.s.H.#d.^R...Ud...y...tB...5K.#...M,i..Q.&...=..6.\|/.....E.)...o..xm.Q..Q.>.....A.0I....T,.=....b..U.Q....g....lxu.."..3.,..nYs.d;g......>...7vF..2..n..fD.1.nub...d.....\|.7p.....S.~.........

Chrome Cache Entry: 54

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 55

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	52
Entropy (8bit):	4.332758651241789
Encrypted:	false
SSDEEP:	3:O2PRk5xCunnVKekY:OEkLCokY
MD5:	4C73EF2C5836B2524CF0DCF05C5A5E1E
SHA1:	A3C11721A416039DDF8328DBC0C24C270F75C3AB
SHA-256:	462CCC2B7B8048DBE77886E203959F49B02EDA47C9AF39F22BFD649D219A44F1
SHA-512:	DF21A0EA934263545DDF076D2BB84A76FA6906BAD1EC5A8D2DD268E62E2A69827107FF0B7F09CF96879B5FE8A23502F53934B7FF72228537BB4EBCCFC835241D
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISJQnQPpg0N1NiLhIFDYJGpz8SBQ0Dp5DTEgUNaenAthIFDUGn_58=?alt=proto
Preview:	CiQKBw2CRqc/GgAKBw0Dp5DTGgAKBw1p6cC2GgAKBw1Bp/+fGgA=

Chrome Cache Entry: 56

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 32 x 32
Category:	dropped
Size (bytes):	4178
Entropy (8bit):	7.491119873175258
Encrypted:	false
SSDEEP:	48:3je4MHZKDtbvGOFkYajWVOwD2W4UYX084HY4zHdwU4zeoAF5R4JTp3uV04gBFy8g:3je4XtDlqWdWvfWJXPF5RcdU0dsmuS
MD5:	20295FD727FBC02635F3D8C947E54556
SHA1:	DE01015DB36A6330D4E0854A69555A5E3F3556C7
SHA-256:	93C99B1A62BDEF426C6029D8EEAA796AF079BD0B67C7BD67FDA444E8AFB6F562
SHA-512:	495A1766EC0560E31689C449AF356BDB88CD862784D9B4C7E2E3AD1E4345ED2EAE434FC15B3ECEAC04397E49C21AC52096B1434B465AB8D8A2DF2F0129820CF4
Malicious:	false
Reputation:	low
Preview:	GIF89a . .........................~~~................................>>>VVV```\|\|\|......JJJlll...............,,,^^^...LLL.................................................................................!..NETSCAPE2.0.....!..Created with ajaxload.info.!.......,.... . ....@.pH$.8.Gq.$N..A.3(..L....V....K\|P(...:.(..r.B.._@X!/...BxBnb}E.g....o.r..E.g..^..oWD.c.....JC.g......oqm.o..........E.....{p~....r...D....}.M....d......K......r.........o....\|........].q...` 9C.f).$'.=..}.C.^.u..-.H..!.............O.K"1......5.&{j.T. .BBo..e...6..<...@.B?..1..)..G.b.K... .!.......,.... . ....@.pH$&4.Bq.$..D..b(.......V....[4.._..:.t:"r.qh@..a..)..g.Bk_.o..E.g~.....#r.JD.g.xl.oWF.C....~mg......o.D.....B.....w...K.!.......C........wE... ..d....X.............r................s'...xM.&T$$..\|M...C.... .A...Bl..d....K.d.V..?oFl-X. .L[.J*....6..!."...5\@....p..oI..m...N!Q.Xm..@..%2u:uH2.\.R.#.a..!.......,.... . ....@.pH$...Bq.$&.D...(..L....V....[$.....:4P(.r.s..._...I..g.BxB.o..E g.w^

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 9582
Category:	downloaded
Size (bytes):	2876
Entropy (8bit):	7.927258942534974
Encrypted:	false
SSDEEP:	48:XUmcQDWwu+f3LHWw21Sf1qLohQp8X6g68ul7P7wYC0i3ANJJosIvpdc7U:1DWI/K1SootX6NXNVBQANBom7U
MD5:	68FFFDE2F5C5F5A23A790089EA17A4DA
SHA1:	FA076FAB236C3FE2A0992596318FB2D4E5343752
SHA-256:	3065955F7F491320703127A0FED2F0C13EFB3C27B701F2211BDE5F0DC5C5D8B5
SHA-512:	2EB902449AF92BB53B4D8AAEE3F59612D29D9C668073439C62416C8A44124FBB8E005C9EEDD4F79294371A06C2ABF6C5FCAE42AF9B96BD24B505F946F39CC762
Malicious:	false
Reputation:	low
URL:	http://mail.findmy-ld.help/icloud-archivos/code2022esp.php
Preview:	...........Ras.6..._.0....I.r....I.....&.unn...X.H@..@...O...c..).....d.sG{Db.....7......?~<".+$.....$.....a.>=yJ~8y..&..rb......L..E$.+..t.X$.a..,=y.z..Tjm!.G..8&.........z.......6..I].."V6.lJ...>H.=..R.9$e^.8F@.c<....G....C%.Yt.....e..a.)....@.....{s.,~...>..S..,..X....Bp.g..A....P....eTB6.O.z*..X......=1 ..40..rb.R....G..,J.)....6"..7....N..B.)...)...5:-..BI......Z.Q..4.F.w...h..._\....Z. b.$..;.B.!.W<.....<...E.SGc........ !....A.p.<.z.I.>.3.:......j.....(..G\...Va.........+.>E\|.o.vIl..>....<..F(......b.\............q..2....!}).H....FV....9.#..............9.+.c.3(....8.fQ<.H.F.M1=..#......LKm...>......9V3T..H.>...7....D.....$\.R[..\...\|0...V..w`H..\......Gx_..!.HP3.....y8....gr..Z...S.E5qz.x.X0...O.b......1A`.......c...........D(....t.K..mM=.5...q...K.P::.....Y.S{......O...p...)u..OL+.c&..../............a}.u.a.S..fU..}..3..T..E......W._.G.....bk_.C...&.@..\|3.f...G....x.;"T..{........"........poogg/......"...].o.p..[.......

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 4 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel
Category:	dropped
Size (bytes):	9062
Entropy (8bit):	3.284224550667547
Encrypted:	false
SSDEEP:	48:z87CC6NTQ8Om4F/POAVpSVyvFElSfwa89A4:ACC6NTEmAGAVcLSfwa8N
MD5:	28EC4EABA5AE210B98A11257CAF5BADE
SHA1:	6164148A39D6A27286641896FCE3B76F439AEAB1
SHA-256:	3F5086612AAE9363C9FB02949219CEF19854C18FE5AD4EDA78AA1AEFCC79CC71
SHA-512:	4EFB48689296863D6E05B3CF32F8F98AC57A2BDEAE09209735170DD7F1C70E22A9BD2FBE93FCCB7181B8C1B6DFE555AF548129EF7B8705ED50486A972815868E
Malicious:	false
Reputation:	low
Preview:	...... ..........F...........h....... .... .....V......... .h.......(... ...@...............................BBB.....rrr.....ZZZ.............NNN.~~~.fff.................JJJ.....zzz.bbb.VVV.....nnn.........FFF.....vvv.....^^^.............RRR.....jjj...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Static File Info

⊘No static file info

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-13T17:51:45.214392+0200	2018334	ET PHISHING Possible Phish - Saved Website Comment Observed	2	50.6.138.164	80	192.168.2.4	49736	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 13, 2024 17:51:40.116470098 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 13, 2024 17:51:44.674385071 CEST	49735	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:44.674588919 CEST	49736	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:44.679430008 CEST	80	49735	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:44.679502964 CEST	80	49736	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:44.679523945 CEST	49735	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:44.679569960 CEST	49736	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:44.681165934 CEST	49736	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:44.686160088 CEST	80	49736	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:45.184669971 CEST	80	49736	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:45.184731960 CEST	80	49736	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:45.184751034 CEST	80	49736	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:45.184781075 CEST	49736	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:45.208316088 CEST	49737	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:45.208637953 CEST	49738	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:45.209347963 CEST	49739	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:45.209624052 CEST	49736	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:45.209971905 CEST	49735	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:45.213673115 CEST	80	49737	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:45.213701963 CEST	80	49738	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:45.213779926 CEST	49737	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:45.213824034 CEST	49738	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:45.214077950 CEST	49738	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:45.214155912 CEST	49737	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:45.214289904 CEST	80	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:45.214350939 CEST	49739	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:45.214391947 CEST	80	49736	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:45.214507103 CEST	49739	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:45.215019941 CEST	80	49735	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:45.219871044 CEST	80	49738	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:45.219912052 CEST	80	49737	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:45.219928026 CEST	80	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:45.328190088 CEST	80	49736	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:45.338641882 CEST	80	49735	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:45.338689089 CEST	80	49735	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:45.338738918 CEST	80	49735	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:45.338805914 CEST	80	49735	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:45.338850021 CEST	80	49735	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:45.338866949 CEST	49735	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:45.338867903 CEST	49735	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:45.338896990 CEST	80	49735	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:45.338943958 CEST	80	49735	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:45.338946104 CEST	49735	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:45.339188099 CEST	80	49735	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:45.339236021 CEST	80	49735	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:45.339245081 CEST	49735	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:45.339283943 CEST	80	49735	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:45.339337111 CEST	49735	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:45.344024897 CEST	80	49735	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:45.358206987 CEST	80	49735	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:45.358252048 CEST	80	49735	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:45.358274937 CEST	49735	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:45.369133949 CEST	49736	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:45.399908066 CEST	49735	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:45.429323912 CEST	80	49735	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:45.429421902 CEST	80	49735	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:45.429472923 CEST	80	49735	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:45.429519892 CEST	80	49735	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:45.429568052 CEST	80	49735	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:45.429611921 CEST	80	49735	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:45.429615974 CEST	49735	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:45.429616928 CEST	49735	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:45.429697037 CEST	49735	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:45.718667984 CEST	80	49738	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:45.728121996 CEST	80	49737	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:45.728224039 CEST	80	49737	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:45.728274107 CEST	80	49737	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:45.728291988 CEST	49737	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:45.728322029 CEST	80	49737	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:45.728379011 CEST	49737	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:45.739273071 CEST	80	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:45.740591049 CEST	80	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:45.740670919 CEST	49739	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:45.773094893 CEST	49738	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:46.016710997 CEST	49739	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:46.017060995 CEST	49738	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:46.021778107 CEST	80	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:46.022030115 CEST	80	49738	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:46.139991999 CEST	80	49738	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:46.140049934 CEST	80	49738	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:46.140099049 CEST	80	49738	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:46.140115976 CEST	49738	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:46.141360998 CEST	80	49738	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:46.141407967 CEST	80	49738	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:46.141427040 CEST	49738	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:46.144661903 CEST	49738	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:46.144846916 CEST	80	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:46.144895077 CEST	80	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:46.144942999 CEST	49739	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:46.144970894 CEST	80	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:46.146053076 CEST	80	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:46.146104097 CEST	80	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:46.146121979 CEST	49739	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:46.149708033 CEST	80	49738	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:46.152450085 CEST	49739	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:46.157357931 CEST	80	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:46.265288115 CEST	49743	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:46.265501976 CEST	49744	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:46.268821955 CEST	80	49738	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:46.268892050 CEST	80	49738	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:46.268935919 CEST	80	49738	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:46.268939018 CEST	49738	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:46.269047976 CEST	80	49738	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:46.269094944 CEST	80	49738	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:46.269098997 CEST	49738	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:46.270376921 CEST	80	49743	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:46.270447969 CEST	49743	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:46.270468950 CEST	80	49744	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:46.270525932 CEST	49744	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:46.270800114 CEST	49743	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:46.270884037 CEST	49744	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:46.275665998 CEST	80	49743	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:46.275819063 CEST	80	49744	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:46.284673929 CEST	80	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:46.284739017 CEST	80	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:46.284759045 CEST	80	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:46.284774065 CEST	49739	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:46.284910917 CEST	80	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:46.284929037 CEST	80	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:46.284938097 CEST	49739	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:46.319732904 CEST	49738	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:46.335273027 CEST	49739	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:46.472204924 CEST	49739	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:46.476986885 CEST	80	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:46.598370075 CEST	80	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:46.598392010 CEST	80	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:46.598414898 CEST	80	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:46.598440886 CEST	49739	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:46.598454952 CEST	80	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:46.598475933 CEST	80	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:46.598490000 CEST	49739	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:46.598634958 CEST	80	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:46.598670959 CEST	49739	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:46.598709106 CEST	80	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:46.646554947 CEST	49739	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:46.692841053 CEST	80	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:46.702806950 CEST	49747	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:46.707786083 CEST	80	49747	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:46.707875967 CEST	49747	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:46.708008051 CEST	49747	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:46.713161945 CEST	80	49747	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:46.744739056 CEST	49739	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:46.768230915 CEST	80	49743	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:46.768280983 CEST	80	49743	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:46.768522978 CEST	49743	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:46.771640062 CEST	80	49744	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:46.771711111 CEST	80	49744	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:46.771733046 CEST	80	49744	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:46.771774054 CEST	49744	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:46.772037029 CEST	80	49744	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:46.772075891 CEST	49744	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:46.910279989 CEST	49749	443	192.168.2.4	142.250.185.196
Oct 13, 2024 17:51:46.910340071 CEST	443	49749	142.250.185.196	192.168.2.4
Oct 13, 2024 17:51:46.910434961 CEST	49749	443	192.168.2.4	142.250.185.196
Oct 13, 2024 17:51:46.910713911 CEST	49749	443	192.168.2.4	142.250.185.196
Oct 13, 2024 17:51:46.910749912 CEST	443	49749	142.250.185.196	192.168.2.4
Oct 13, 2024 17:51:47.250395060 CEST	80	49747	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:47.250426054 CEST	80	49747	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:47.250438929 CEST	80	49747	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:47.250449896 CEST	80	49747	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:47.250461102 CEST	80	49747	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:47.250473022 CEST	80	49747	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:47.250483036 CEST	80	49747	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:47.250519991 CEST	49747	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:47.250519991 CEST	49747	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:47.302810907 CEST	49747	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:47.342926025 CEST	80	49747	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:47.396558046 CEST	49747	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:47.565107107 CEST	443	49749	142.250.185.196	192.168.2.4
Oct 13, 2024 17:51:47.565447092 CEST	49749	443	192.168.2.4	142.250.185.196
Oct 13, 2024 17:51:47.565479994 CEST	443	49749	142.250.185.196	192.168.2.4
Oct 13, 2024 17:51:47.567013025 CEST	443	49749	142.250.185.196	192.168.2.4
Oct 13, 2024 17:51:47.567101955 CEST	49749	443	192.168.2.4	142.250.185.196
Oct 13, 2024 17:51:47.568924904 CEST	49749	443	192.168.2.4	142.250.185.196
Oct 13, 2024 17:51:47.569060087 CEST	443	49749	142.250.185.196	192.168.2.4
Oct 13, 2024 17:51:47.630780935 CEST	49749	443	192.168.2.4	142.250.185.196
Oct 13, 2024 17:51:47.630840063 CEST	443	49749	142.250.185.196	192.168.2.4
Oct 13, 2024 17:51:47.677634001 CEST	49749	443	192.168.2.4	142.250.185.196
Oct 13, 2024 17:51:48.200527906 CEST	49750	443	192.168.2.4	184.28.90.27
Oct 13, 2024 17:51:48.200575113 CEST	443	49750	184.28.90.27	192.168.2.4
Oct 13, 2024 17:51:48.200731039 CEST	49750	443	192.168.2.4	184.28.90.27
Oct 13, 2024 17:51:48.202244997 CEST	49750	443	192.168.2.4	184.28.90.27
Oct 13, 2024 17:51:48.202265024 CEST	443	49750	184.28.90.27	192.168.2.4
Oct 13, 2024 17:51:48.940984964 CEST	443	49750	184.28.90.27	192.168.2.4
Oct 13, 2024 17:51:48.941078901 CEST	49750	443	192.168.2.4	184.28.90.27
Oct 13, 2024 17:51:48.945713997 CEST	49750	443	192.168.2.4	184.28.90.27
Oct 13, 2024 17:51:48.945725918 CEST	443	49750	184.28.90.27	192.168.2.4
Oct 13, 2024 17:51:48.945987940 CEST	443	49750	184.28.90.27	192.168.2.4
Oct 13, 2024 17:51:48.990237951 CEST	49750	443	192.168.2.4	184.28.90.27
Oct 13, 2024 17:51:48.998796940 CEST	49750	443	192.168.2.4	184.28.90.27
Oct 13, 2024 17:51:49.043395996 CEST	443	49750	184.28.90.27	192.168.2.4
Oct 13, 2024 17:51:49.271775961 CEST	443	49750	184.28.90.27	192.168.2.4
Oct 13, 2024 17:51:49.271840096 CEST	443	49750	184.28.90.27	192.168.2.4
Oct 13, 2024 17:51:49.271886110 CEST	49750	443	192.168.2.4	184.28.90.27
Oct 13, 2024 17:51:49.272133112 CEST	49750	443	192.168.2.4	184.28.90.27
Oct 13, 2024 17:51:49.272155046 CEST	443	49750	184.28.90.27	192.168.2.4
Oct 13, 2024 17:51:49.272176981 CEST	49750	443	192.168.2.4	184.28.90.27
Oct 13, 2024 17:51:49.272182941 CEST	443	49750	184.28.90.27	192.168.2.4
Oct 13, 2024 17:51:49.320965052 CEST	49751	443	192.168.2.4	184.28.90.27
Oct 13, 2024 17:51:49.321005106 CEST	443	49751	184.28.90.27	192.168.2.4
Oct 13, 2024 17:51:49.321075916 CEST	49751	443	192.168.2.4	184.28.90.27
Oct 13, 2024 17:51:49.321613073 CEST	49751	443	192.168.2.4	184.28.90.27
Oct 13, 2024 17:51:49.321621895 CEST	443	49751	184.28.90.27	192.168.2.4
Oct 13, 2024 17:51:50.027299881 CEST	443	49751	184.28.90.27	192.168.2.4
Oct 13, 2024 17:51:50.027431965 CEST	49751	443	192.168.2.4	184.28.90.27
Oct 13, 2024 17:51:50.028762102 CEST	49751	443	192.168.2.4	184.28.90.27
Oct 13, 2024 17:51:50.028774023 CEST	443	49751	184.28.90.27	192.168.2.4
Oct 13, 2024 17:51:50.028997898 CEST	443	49751	184.28.90.27	192.168.2.4
Oct 13, 2024 17:51:50.030390024 CEST	49751	443	192.168.2.4	184.28.90.27
Oct 13, 2024 17:51:50.071434021 CEST	443	49751	184.28.90.27	192.168.2.4
Oct 13, 2024 17:51:50.329155922 CEST	80	49736	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:50.329257011 CEST	49736	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:50.340142965 CEST	80	49735	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:50.340341091 CEST	49735	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:50.358581066 CEST	443	49751	184.28.90.27	192.168.2.4
Oct 13, 2024 17:51:50.358659983 CEST	443	49751	184.28.90.27	192.168.2.4
Oct 13, 2024 17:51:50.358805895 CEST	49751	443	192.168.2.4	184.28.90.27
Oct 13, 2024 17:51:50.359826088 CEST	49751	443	192.168.2.4	184.28.90.27
Oct 13, 2024 17:51:50.359844923 CEST	443	49751	184.28.90.27	192.168.2.4
Oct 13, 2024 17:51:50.359855890 CEST	49751	443	192.168.2.4	184.28.90.27
Oct 13, 2024 17:51:50.359862089 CEST	443	49751	184.28.90.27	192.168.2.4
Oct 13, 2024 17:51:50.720431089 CEST	80	49737	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:50.720649958 CEST	49737	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:51.354053020 CEST	80	49738	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:51.354173899 CEST	49738	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:51.599963903 CEST	80	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:51.600022078 CEST	49739	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:51.744740009 CEST	49736	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:51.744842052 CEST	49735	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:51.744940042 CEST	49737	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:51.745130062 CEST	49738	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:51.745198965 CEST	49739	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:51.751321077 CEST	80	49736	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:51.751337051 CEST	80	49735	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:51.751348019 CEST	80	49737	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:51.751358986 CEST	80	49738	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:51.751393080 CEST	80	49739	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:51.768450022 CEST	80	49743	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:51.768518925 CEST	49743	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:51.771440983 CEST	80	49744	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:51.771507025 CEST	49744	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:52.250900030 CEST	80	49747	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:52.250981092 CEST	49747	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:53.475955963 CEST	49752	443	192.168.2.4	172.202.163.200
Oct 13, 2024 17:51:53.476012945 CEST	443	49752	172.202.163.200	192.168.2.4
Oct 13, 2024 17:51:53.476099014 CEST	49752	443	192.168.2.4	172.202.163.200
Oct 13, 2024 17:51:53.479974031 CEST	49752	443	192.168.2.4	172.202.163.200
Oct 13, 2024 17:51:53.479986906 CEST	443	49752	172.202.163.200	192.168.2.4
Oct 13, 2024 17:51:53.744172096 CEST	49743	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:53.744371891 CEST	49744	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:53.744447947 CEST	49747	80	192.168.2.4	50.6.138.164
Oct 13, 2024 17:51:53.749238014 CEST	80	49743	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:53.749253035 CEST	80	49744	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:53.749375105 CEST	80	49747	50.6.138.164	192.168.2.4
Oct 13, 2024 17:51:54.558250904 CEST	443	49752	172.202.163.200	192.168.2.4
Oct 13, 2024 17:51:54.558360100 CEST	49752	443	192.168.2.4	172.202.163.200
Oct 13, 2024 17:51:54.565238953 CEST	49752	443	192.168.2.4	172.202.163.200
Oct 13, 2024 17:51:54.565265894 CEST	443	49752	172.202.163.200	192.168.2.4
Oct 13, 2024 17:51:54.565654039 CEST	443	49752	172.202.163.200	192.168.2.4
Oct 13, 2024 17:51:54.615058899 CEST	49752	443	192.168.2.4	172.202.163.200
Oct 13, 2024 17:51:55.251492023 CEST	49752	443	192.168.2.4	172.202.163.200
Oct 13, 2024 17:51:55.295423031 CEST	443	49752	172.202.163.200	192.168.2.4
Oct 13, 2024 17:51:55.538517952 CEST	443	49752	172.202.163.200	192.168.2.4
Oct 13, 2024 17:51:55.538578033 CEST	443	49752	172.202.163.200	192.168.2.4
Oct 13, 2024 17:51:55.538606882 CEST	443	49752	172.202.163.200	192.168.2.4
Oct 13, 2024 17:51:55.538625956 CEST	443	49752	172.202.163.200	192.168.2.4
Oct 13, 2024 17:51:55.538661003 CEST	49752	443	192.168.2.4	172.202.163.200
Oct 13, 2024 17:51:55.538701057 CEST	443	49752	172.202.163.200	192.168.2.4
Oct 13, 2024 17:51:55.538723946 CEST	49752	443	192.168.2.4	172.202.163.200
Oct 13, 2024 17:51:55.538738966 CEST	443	49752	172.202.163.200	192.168.2.4
Oct 13, 2024 17:51:55.538764000 CEST	49752	443	192.168.2.4	172.202.163.200
Oct 13, 2024 17:51:55.538798094 CEST	49752	443	192.168.2.4	172.202.163.200
Oct 13, 2024 17:51:55.542651892 CEST	443	49752	172.202.163.200	192.168.2.4
Oct 13, 2024 17:51:55.542722940 CEST	49752	443	192.168.2.4	172.202.163.200
Oct 13, 2024 17:51:55.542737961 CEST	443	49752	172.202.163.200	192.168.2.4
Oct 13, 2024 17:51:55.542881012 CEST	443	49752	172.202.163.200	192.168.2.4
Oct 13, 2024 17:51:55.542931080 CEST	49752	443	192.168.2.4	172.202.163.200
Oct 13, 2024 17:51:56.154206038 CEST	49752	443	192.168.2.4	172.202.163.200
Oct 13, 2024 17:51:56.154262066 CEST	443	49752	172.202.163.200	192.168.2.4
Oct 13, 2024 17:51:56.154290915 CEST	49752	443	192.168.2.4	172.202.163.200
Oct 13, 2024 17:51:56.154309034 CEST	443	49752	172.202.163.200	192.168.2.4
Oct 13, 2024 17:51:57.459723949 CEST	443	49749	142.250.185.196	192.168.2.4
Oct 13, 2024 17:51:57.459808111 CEST	443	49749	142.250.185.196	192.168.2.4
Oct 13, 2024 17:51:57.459945917 CEST	49749	443	192.168.2.4	142.250.185.196
Oct 13, 2024 17:51:57.744509935 CEST	49749	443	192.168.2.4	142.250.185.196
Oct 13, 2024 17:51:57.744579077 CEST	443	49749	142.250.185.196	192.168.2.4
Oct 13, 2024 17:52:09.435914040 CEST	56469	53	192.168.2.4	162.159.36.2
Oct 13, 2024 17:52:09.440987110 CEST	53	56469	162.159.36.2	192.168.2.4
Oct 13, 2024 17:52:09.441046953 CEST	56469	53	192.168.2.4	162.159.36.2
Oct 13, 2024 17:52:09.441101074 CEST	56469	53	192.168.2.4	162.159.36.2
Oct 13, 2024 17:52:09.445957899 CEST	53	56469	162.159.36.2	192.168.2.4
Oct 13, 2024 17:52:09.925066948 CEST	53	56469	162.159.36.2	192.168.2.4
Oct 13, 2024 17:52:09.925920010 CEST	56469	53	192.168.2.4	162.159.36.2
Oct 13, 2024 17:52:09.931229115 CEST	53	56469	162.159.36.2	192.168.2.4
Oct 13, 2024 17:52:09.931287050 CEST	56469	53	192.168.2.4	162.159.36.2
Oct 13, 2024 17:52:10.947151899 CEST	56471	443	192.168.2.4	172.202.163.200
Oct 13, 2024 17:52:10.947201014 CEST	443	56471	172.202.163.200	192.168.2.4
Oct 13, 2024 17:52:10.947273016 CEST	56471	443	192.168.2.4	172.202.163.200
Oct 13, 2024 17:52:10.947845936 CEST	56471	443	192.168.2.4	172.202.163.200
Oct 13, 2024 17:52:10.947861910 CEST	443	56471	172.202.163.200	192.168.2.4
Oct 13, 2024 17:52:11.680109978 CEST	443	56471	172.202.163.200	192.168.2.4
Oct 13, 2024 17:52:11.680214882 CEST	56471	443	192.168.2.4	172.202.163.200
Oct 13, 2024 17:52:11.681953907 CEST	56471	443	192.168.2.4	172.202.163.200
Oct 13, 2024 17:52:11.681967974 CEST	443	56471	172.202.163.200	192.168.2.4
Oct 13, 2024 17:52:11.682332993 CEST	443	56471	172.202.163.200	192.168.2.4
Oct 13, 2024 17:52:11.683875084 CEST	56471	443	192.168.2.4	172.202.163.200
Oct 13, 2024 17:52:11.727412939 CEST	443	56471	172.202.163.200	192.168.2.4
Oct 13, 2024 17:52:11.872633934 CEST	443	56471	172.202.163.200	192.168.2.4
Oct 13, 2024 17:52:11.872808933 CEST	56471	443	192.168.2.4	172.202.163.200
Oct 13, 2024 17:52:11.872839928 CEST	443	56471	172.202.163.200	192.168.2.4
Oct 13, 2024 17:52:11.872852087 CEST	443	56471	172.202.163.200	192.168.2.4
Oct 13, 2024 17:52:11.872888088 CEST	56471	443	192.168.2.4	172.202.163.200
Oct 13, 2024 17:52:11.872909069 CEST	443	56471	172.202.163.200	192.168.2.4
Oct 13, 2024 17:52:13.128329039 CEST	56472	443	192.168.2.4	172.202.163.200
Oct 13, 2024 17:52:13.128443003 CEST	443	56472	172.202.163.200	192.168.2.4
Oct 13, 2024 17:52:13.128640890 CEST	56472	443	192.168.2.4	172.202.163.200
Oct 13, 2024 17:52:13.132734060 CEST	56472	443	192.168.2.4	172.202.163.200
Oct 13, 2024 17:52:13.132776022 CEST	443	56472	172.202.163.200	192.168.2.4
Oct 13, 2024 17:52:13.870044947 CEST	443	56472	172.202.163.200	192.168.2.4
Oct 13, 2024 17:52:13.870119095 CEST	56472	443	192.168.2.4	172.202.163.200
Oct 13, 2024 17:52:13.871862888 CEST	56472	443	192.168.2.4	172.202.163.200
Oct 13, 2024 17:52:13.871880054 CEST	443	56472	172.202.163.200	192.168.2.4
Oct 13, 2024 17:52:13.872278929 CEST	443	56472	172.202.163.200	192.168.2.4
Oct 13, 2024 17:52:13.873500109 CEST	56472	443	192.168.2.4	172.202.163.200
Oct 13, 2024 17:52:13.919395924 CEST	443	56472	172.202.163.200	192.168.2.4
Oct 13, 2024 17:52:14.156505108 CEST	443	56472	172.202.163.200	192.168.2.4
Oct 13, 2024 17:52:14.156641960 CEST	443	56472	172.202.163.200	192.168.2.4
Oct 13, 2024 17:52:14.156682014 CEST	443	56472	172.202.163.200	192.168.2.4
Oct 13, 2024 17:52:14.156702042 CEST	56472	443	192.168.2.4	172.202.163.200
Oct 13, 2024 17:52:14.156729937 CEST	443	56472	172.202.163.200	192.168.2.4
Oct 13, 2024 17:52:14.156749964 CEST	56472	443	192.168.2.4	172.202.163.200
Oct 13, 2024 17:52:14.156783104 CEST	56472	443	192.168.2.4	172.202.163.200
Oct 13, 2024 17:52:14.156876087 CEST	443	56472	172.202.163.200	192.168.2.4
Oct 13, 2024 17:52:14.156929016 CEST	56472	443	192.168.2.4	172.202.163.200
Oct 13, 2024 17:52:14.156934977 CEST	443	56472	172.202.163.200	192.168.2.4
Oct 13, 2024 17:52:14.157057047 CEST	443	56472	172.202.163.200	192.168.2.4
Oct 13, 2024 17:52:14.157097101 CEST	56472	443	192.168.2.4	172.202.163.200
Oct 13, 2024 17:52:14.166198015 CEST	56472	443	192.168.2.4	172.202.163.200
Oct 13, 2024 17:52:14.166208982 CEST	443	56472	172.202.163.200	192.168.2.4
Oct 13, 2024 17:52:14.166229963 CEST	56472	443	192.168.2.4	172.202.163.200
Oct 13, 2024 17:52:14.166234970 CEST	443	56472	172.202.163.200	192.168.2.4
Oct 13, 2024 17:52:14.448882103 CEST	56473	443	192.168.2.4	172.202.163.200
Oct 13, 2024 17:52:14.448930025 CEST	443	56473	172.202.163.200	192.168.2.4
Oct 13, 2024 17:52:14.450483084 CEST	56473	443	192.168.2.4	172.202.163.200
Oct 13, 2024 17:52:14.450483084 CEST	56473	443	192.168.2.4	172.202.163.200
Oct 13, 2024 17:52:14.450517893 CEST	443	56473	172.202.163.200	192.168.2.4
Oct 13, 2024 17:52:15.164494991 CEST	443	56473	172.202.163.200	192.168.2.4
Oct 13, 2024 17:52:15.164578915 CEST	56473	443	192.168.2.4	172.202.163.200
Oct 13, 2024 17:52:15.166048050 CEST	56473	443	192.168.2.4	172.202.163.200
Oct 13, 2024 17:52:15.166081905 CEST	443	56473	172.202.163.200	192.168.2.4
Oct 13, 2024 17:52:15.166419983 CEST	443	56473	172.202.163.200	192.168.2.4
Oct 13, 2024 17:52:15.167582035 CEST	56473	443	192.168.2.4	172.202.163.200
Oct 13, 2024 17:52:15.211429119 CEST	443	56473	172.202.163.200	192.168.2.4
Oct 13, 2024 17:52:15.437278986 CEST	443	56473	172.202.163.200	192.168.2.4
Oct 13, 2024 17:52:15.437354088 CEST	443	56473	172.202.163.200	192.168.2.4
Oct 13, 2024 17:52:15.437408924 CEST	443	56473	172.202.163.200	192.168.2.4
Oct 13, 2024 17:52:15.437428951 CEST	56473	443	192.168.2.4	172.202.163.200
Oct 13, 2024 17:52:15.437463045 CEST	443	56473	172.202.163.200	192.168.2.4
Oct 13, 2024 17:52:15.437482119 CEST	56473	443	192.168.2.4	172.202.163.200
Oct 13, 2024 17:52:15.437511921 CEST	56473	443	192.168.2.4	172.202.163.200
Oct 13, 2024 17:52:15.438148022 CEST	443	56473	172.202.163.200	192.168.2.4
Oct 13, 2024 17:52:15.438220978 CEST	443	56473	172.202.163.200	192.168.2.4
Oct 13, 2024 17:52:15.438235998 CEST	56473	443	192.168.2.4	172.202.163.200
Oct 13, 2024 17:52:15.438246965 CEST	443	56473	172.202.163.200	192.168.2.4
Oct 13, 2024 17:52:15.438272953 CEST	56473	443	192.168.2.4	172.202.163.200
Oct 13, 2024 17:52:15.438409090 CEST	443	56473	172.202.163.200	192.168.2.4
Oct 13, 2024 17:52:15.438457966 CEST	56473	443	192.168.2.4	172.202.163.200
Oct 13, 2024 17:52:15.444154024 CEST	56473	443	192.168.2.4	172.202.163.200
Oct 13, 2024 17:52:15.444170952 CEST	443	56473	172.202.163.200	192.168.2.4
Oct 13, 2024 17:52:15.444226980 CEST	56473	443	192.168.2.4	172.202.163.200
Oct 13, 2024 17:52:15.444233894 CEST	443	56473	172.202.163.200	192.168.2.4
Oct 13, 2024 17:52:36.874705076 CEST	56474	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:36.874752045 CEST	443	56474	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:36.874834061 CEST	56474	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:36.875247002 CEST	56474	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:36.875257969 CEST	443	56474	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:37.538552999 CEST	443	56474	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:37.538666964 CEST	56474	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:37.540239096 CEST	56474	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:37.540246964 CEST	443	56474	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:37.540580988 CEST	443	56474	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:37.549391031 CEST	56474	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:37.595412970 CEST	443	56474	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:37.648935080 CEST	443	56474	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:37.648967028 CEST	443	56474	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:37.648986101 CEST	443	56474	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:37.649041891 CEST	56474	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:37.649056911 CEST	443	56474	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:37.649080038 CEST	56474	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:37.649111986 CEST	56474	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:37.736115932 CEST	443	56474	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:37.736140966 CEST	443	56474	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:37.736192942 CEST	56474	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:37.736203909 CEST	443	56474	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:37.736251116 CEST	56474	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:37.736251116 CEST	56474	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:37.737689018 CEST	443	56474	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:37.737709045 CEST	443	56474	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:37.737780094 CEST	56474	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:37.737780094 CEST	56474	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:37.737787962 CEST	443	56474	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:37.737989902 CEST	56474	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:37.824489117 CEST	443	56474	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:37.824528933 CEST	443	56474	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:37.824573040 CEST	56474	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:37.824579954 CEST	443	56474	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:37.824616909 CEST	56474	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:37.824649096 CEST	56474	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:37.825666904 CEST	443	56474	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:37.825686932 CEST	443	56474	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:37.825762033 CEST	56474	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:37.825768948 CEST	443	56474	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:37.825973034 CEST	56474	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:37.826595068 CEST	443	56474	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:37.826613903 CEST	443	56474	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:37.826667070 CEST	56474	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:37.826673031 CEST	443	56474	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:37.826754093 CEST	56474	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:37.828438044 CEST	443	56474	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:37.828458071 CEST	443	56474	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:37.828531027 CEST	56474	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:37.828531027 CEST	56474	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:37.828537941 CEST	443	56474	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:37.828603029 CEST	56474	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:37.914783001 CEST	443	56474	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:37.914807081 CEST	443	56474	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:37.914865971 CEST	56474	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:37.914874077 CEST	443	56474	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:37.914972067 CEST	56474	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:37.915611029 CEST	443	56474	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:37.915632010 CEST	443	56474	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:37.915671110 CEST	56474	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:37.915677071 CEST	443	56474	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:37.915705919 CEST	56474	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:37.915719986 CEST	56474	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:37.917006969 CEST	443	56474	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:37.917027950 CEST	443	56474	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:37.917068005 CEST	56474	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:37.917073965 CEST	443	56474	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:37.917093992 CEST	56474	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:37.917110920 CEST	56474	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:37.917825937 CEST	443	56474	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:37.917848110 CEST	443	56474	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:37.917884111 CEST	56474	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:37.917891026 CEST	443	56474	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:37.917917967 CEST	56474	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:37.917933941 CEST	56474	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:37.918653965 CEST	443	56474	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:37.918690920 CEST	443	56474	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:37.918705940 CEST	56474	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:37.918710947 CEST	443	56474	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:37.918730974 CEST	56474	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:37.918756962 CEST	56474	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:37.919523954 CEST	443	56474	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:37.919543028 CEST	443	56474	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:37.919581890 CEST	56474	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:37.919586897 CEST	443	56474	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:37.919614077 CEST	56474	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:37.919624090 CEST	56474	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:37.919632912 CEST	443	56474	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:37.919675112 CEST	56474	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:37.920439959 CEST	56474	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:37.920456886 CEST	443	56474	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:37.962717056 CEST	56475	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:37.962774038 CEST	443	56475	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:37.962853909 CEST	56475	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:37.964548111 CEST	56476	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:37.964639902 CEST	443	56476	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:37.964716911 CEST	56476	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:37.965251923 CEST	56475	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:37.965282917 CEST	443	56475	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:37.966160059 CEST	56476	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:37.966195107 CEST	443	56476	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:37.966870070 CEST	56477	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:37.966913939 CEST	443	56477	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:37.967091084 CEST	56477	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:37.967201948 CEST	56477	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:37.967219114 CEST	443	56477	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:37.967969894 CEST	56478	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:37.967986107 CEST	443	56478	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:37.968048096 CEST	56478	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:37.968646049 CEST	56479	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:37.968667984 CEST	443	56479	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:37.968815088 CEST	56479	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:37.969084024 CEST	56478	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:37.969099045 CEST	443	56478	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:37.969130993 CEST	56479	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:37.969149113 CEST	443	56479	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:38.625042915 CEST	443	56477	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:38.625606060 CEST	56477	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:38.625629902 CEST	443	56477	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:38.626100063 CEST	56477	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:38.626106024 CEST	443	56477	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:38.630568981 CEST	443	56476	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:38.631091118 CEST	56476	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:38.631179094 CEST	443	56476	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:38.631448030 CEST	56476	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:38.631464958 CEST	443	56476	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:38.634030104 CEST	443	56475	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:38.634330988 CEST	56475	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:38.634392977 CEST	443	56475	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:38.634594917 CEST	443	56478	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:38.634812117 CEST	56475	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:38.634866953 CEST	443	56475	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:38.635047913 CEST	56478	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:38.635065079 CEST	443	56478	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:38.635432005 CEST	56478	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:38.635437965 CEST	443	56478	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:38.651597977 CEST	443	56479	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:38.652061939 CEST	56479	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:38.652132988 CEST	443	56479	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:38.652380943 CEST	56479	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:38.652400970 CEST	443	56479	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:38.732337952 CEST	443	56477	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:38.732496023 CEST	443	56477	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:38.732692957 CEST	56477	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:38.732726097 CEST	56477	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:38.732748985 CEST	443	56477	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:38.732762098 CEST	56477	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:38.732769012 CEST	443	56477	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:38.734347105 CEST	443	56476	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:38.734383106 CEST	443	56476	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:38.734441996 CEST	56476	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:38.734450102 CEST	443	56476	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:38.734507084 CEST	56476	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:38.734813929 CEST	56476	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:38.734813929 CEST	56476	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:38.734884977 CEST	443	56476	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:38.734925032 CEST	443	56476	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:38.736203909 CEST	56480	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:38.736296892 CEST	443	56480	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:38.736598015 CEST	56480	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:38.736598015 CEST	56480	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:38.736731052 CEST	443	56480	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:38.736911058 CEST	56481	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:38.736943007 CEST	443	56481	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:38.736984015 CEST	443	56475	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:38.737040997 CEST	443	56475	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:38.737067938 CEST	56481	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:38.737174034 CEST	56481	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:38.737189054 CEST	443	56481	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:38.737214088 CEST	443	56475	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:38.737225056 CEST	56475	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:38.737334967 CEST	56475	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:38.737387896 CEST	56475	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:38.737387896 CEST	56475	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:38.737431049 CEST	443	56475	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:38.737461090 CEST	443	56475	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:38.737514973 CEST	443	56478	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:38.737649918 CEST	443	56478	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:38.737709999 CEST	56478	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:38.737854958 CEST	56478	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:38.737864017 CEST	443	56478	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:38.739708900 CEST	56482	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:38.739728928 CEST	443	56482	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:38.739845037 CEST	56482	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:38.739952087 CEST	56482	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:38.739964962 CEST	443	56482	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:38.741108894 CEST	56483	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:38.741226912 CEST	443	56483	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:38.741302013 CEST	56483	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:38.741436958 CEST	56483	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:38.741472960 CEST	443	56483	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:38.755683899 CEST	443	56479	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:38.755752087 CEST	443	56479	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:38.755825996 CEST	56479	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:38.755877018 CEST	443	56479	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:38.755979061 CEST	443	56479	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:38.756026983 CEST	56479	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:38.756064892 CEST	443	56479	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:38.756093979 CEST	56479	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:38.756093979 CEST	56479	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:38.756114006 CEST	443	56479	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:38.756131887 CEST	443	56479	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:38.758002996 CEST	56484	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:38.758086920 CEST	443	56484	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:38.758168936 CEST	56484	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:38.758316040 CEST	56484	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:38.758351088 CEST	443	56484	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:39.387000084 CEST	443	56480	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:39.387679100 CEST	56480	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:39.387715101 CEST	443	56480	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:39.388124943 CEST	56480	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:39.388180017 CEST	443	56480	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:39.392693043 CEST	443	56481	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:39.393062115 CEST	56481	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:39.393073082 CEST	443	56481	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:39.393423080 CEST	56481	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:39.393429041 CEST	443	56481	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:39.424681902 CEST	443	56484	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:39.425199032 CEST	56484	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:39.425261021 CEST	443	56484	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:39.425703049 CEST	56484	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:39.425717115 CEST	443	56484	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:39.435827971 CEST	443	56483	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:39.435955048 CEST	443	56482	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:39.436356068 CEST	56482	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:39.436366081 CEST	443	56482	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:39.436369896 CEST	56483	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:39.436440945 CEST	443	56483	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:39.436862946 CEST	56482	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:39.436866999 CEST	443	56482	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:39.437019110 CEST	56483	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:39.437060118 CEST	443	56483	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:39.488121986 CEST	443	56480	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:39.488203049 CEST	443	56480	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:39.488460064 CEST	56480	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:39.488460064 CEST	56480	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:39.488460064 CEST	56480	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:39.493201017 CEST	56485	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:39.493242025 CEST	443	56485	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:39.493309975 CEST	56485	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:39.493534088 CEST	56485	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:39.493546009 CEST	443	56485	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:39.494446039 CEST	443	56481	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:39.494534969 CEST	443	56481	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:39.494594097 CEST	56481	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:39.494746923 CEST	56481	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:39.494746923 CEST	56481	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:39.494761944 CEST	443	56481	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:39.494771004 CEST	443	56481	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:39.496958971 CEST	56486	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:39.496968031 CEST	443	56486	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:39.497042894 CEST	56486	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:39.497191906 CEST	56486	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:39.497196913 CEST	443	56486	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:39.525083065 CEST	443	56484	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:39.525151014 CEST	443	56484	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:39.525321960 CEST	56484	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:39.525444031 CEST	56484	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:39.525444031 CEST	56484	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:39.525491953 CEST	443	56484	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:39.525521994 CEST	443	56484	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:39.528271914 CEST	56487	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:39.528366089 CEST	443	56487	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:39.528696060 CEST	56487	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:39.528697014 CEST	56487	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:39.528830051 CEST	443	56487	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:39.540297031 CEST	443	56483	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:39.540484905 CEST	443	56483	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:39.540553093 CEST	56483	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:39.540622950 CEST	56483	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:39.540622950 CEST	56483	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:39.540654898 CEST	443	56483	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:39.540678978 CEST	443	56483	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:39.541261911 CEST	443	56482	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:39.541443110 CEST	443	56482	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:39.541594028 CEST	56482	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:39.541594028 CEST	56482	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:39.541656017 CEST	56482	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:39.541670084 CEST	443	56482	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:39.542967081 CEST	56488	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:39.543006897 CEST	443	56488	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:39.543469906 CEST	56488	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:39.543663979 CEST	56488	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:39.543675900 CEST	443	56488	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:39.543926954 CEST	56489	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:39.543957949 CEST	443	56489	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:39.544018030 CEST	56489	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:39.544159889 CEST	56489	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:39.544173002 CEST	443	56489	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:39.802912951 CEST	56480	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:39.802974939 CEST	443	56480	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:40.143085003 CEST	443	56485	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:40.143651009 CEST	56485	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:40.143660069 CEST	443	56485	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:40.144144058 CEST	56485	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:40.144149065 CEST	443	56485	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:40.147964001 CEST	443	56486	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:40.148296118 CEST	56486	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:40.148308992 CEST	443	56486	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:40.148766041 CEST	56486	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:40.148770094 CEST	443	56486	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:40.212294102 CEST	443	56487	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:40.213329077 CEST	56487	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:40.213390112 CEST	443	56487	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:40.214159966 CEST	56487	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:40.214174032 CEST	443	56487	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:40.245651960 CEST	443	56485	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:40.245717049 CEST	443	56485	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:40.246969938 CEST	56485	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:40.247132063 CEST	56485	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:40.247143030 CEST	443	56485	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:40.247153044 CEST	56485	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:40.247159958 CEST	443	56485	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:40.250736952 CEST	443	56486	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:40.250808001 CEST	443	56486	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:40.250915051 CEST	56486	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:40.252733946 CEST	56490	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:40.252770901 CEST	443	56490	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:40.252851009 CEST	56490	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:40.253128052 CEST	56486	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:40.253134012 CEST	443	56486	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:40.253145933 CEST	56486	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:40.253149986 CEST	443	56486	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:40.253874063 CEST	443	56488	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:40.255923033 CEST	443	56489	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:40.256335974 CEST	56488	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:40.256356955 CEST	443	56488	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:40.257242918 CEST	56488	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:40.257249117 CEST	443	56488	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:40.258021116 CEST	56489	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:40.258038044 CEST	443	56489	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:40.259105921 CEST	56489	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:40.259109974 CEST	443	56489	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:40.259574890 CEST	56490	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:40.259587049 CEST	443	56490	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:40.262557030 CEST	56491	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:40.262582064 CEST	443	56491	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:40.263066053 CEST	56491	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:40.263448000 CEST	56491	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:40.263458967 CEST	443	56491	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:40.334184885 CEST	443	56487	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:40.334311008 CEST	443	56487	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:40.334393024 CEST	56487	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:40.334656000 CEST	56487	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:40.334686995 CEST	443	56487	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:40.339474916 CEST	56492	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:40.339555025 CEST	443	56492	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:40.339653015 CEST	56492	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:40.339989901 CEST	56492	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:40.340022087 CEST	443	56492	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:40.360150099 CEST	443	56488	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:40.360280991 CEST	443	56488	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:40.360342026 CEST	56488	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:40.360676050 CEST	56488	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:40.360686064 CEST	443	56488	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:40.360723019 CEST	56488	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:40.360728025 CEST	443	56488	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:40.361777067 CEST	443	56489	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:40.361908913 CEST	443	56489	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:40.361994982 CEST	56489	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:40.362804890 CEST	56489	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:40.362813950 CEST	443	56489	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:40.367638111 CEST	56493	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:40.367666960 CEST	443	56493	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:40.367919922 CEST	56493	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:40.368402958 CEST	56493	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:40.368422031 CEST	443	56493	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:40.370737076 CEST	56494	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:40.370747089 CEST	443	56494	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:40.370923042 CEST	56494	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:40.371020079 CEST	56494	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:40.371035099 CEST	443	56494	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:40.923357964 CEST	443	56491	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:40.924144030 CEST	56491	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:40.924201012 CEST	443	56491	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:40.925100088 CEST	56491	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:40.925112009 CEST	443	56491	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:40.955202103 CEST	443	56490	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:40.955674887 CEST	56490	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:40.955732107 CEST	443	56490	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:40.956294060 CEST	56490	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:40.956307888 CEST	443	56490	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:41.008353949 CEST	443	56492	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:41.008721113 CEST	56492	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:41.008759022 CEST	443	56492	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:41.009844065 CEST	56492	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:41.009850025 CEST	443	56492	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:41.024962902 CEST	443	56491	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:41.025039911 CEST	443	56491	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:41.025094986 CEST	56491	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:41.025290966 CEST	56491	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:41.025290966 CEST	56491	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:41.025326967 CEST	443	56491	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:41.025348902 CEST	443	56491	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:41.029273033 CEST	56495	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:41.029335976 CEST	443	56495	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:41.029426098 CEST	56495	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:41.029715061 CEST	56495	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:41.029747963 CEST	443	56495	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:41.047178984 CEST	443	56494	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:41.047643900 CEST	56494	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:41.047660112 CEST	443	56494	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:41.048374891 CEST	56494	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:41.048381090 CEST	443	56494	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:41.062045097 CEST	443	56490	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:41.062124014 CEST	443	56490	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:41.062271118 CEST	56490	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:41.062534094 CEST	56490	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:41.062570095 CEST	443	56490	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:41.062608004 CEST	56490	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:41.062623978 CEST	443	56490	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:41.065035105 CEST	443	56493	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:41.065237045 CEST	56496	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:41.065258980 CEST	443	56496	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:41.065318108 CEST	56496	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:41.066147089 CEST	56496	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:41.066157103 CEST	443	56496	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:41.066174030 CEST	56493	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:41.066190004 CEST	443	56493	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:41.067126989 CEST	56493	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:41.067132950 CEST	443	56493	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:41.292589903 CEST	443	56492	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:41.292671919 CEST	443	56492	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:41.292726994 CEST	56492	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:41.292962074 CEST	56492	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:41.292989016 CEST	443	56492	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:41.292996883 CEST	56492	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:41.293004990 CEST	443	56492	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:41.294174910 CEST	443	56494	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:41.294559956 CEST	443	56494	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:41.294620991 CEST	56494	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:41.294655085 CEST	56494	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:41.294655085 CEST	56494	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:41.294668913 CEST	443	56494	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:41.294675112 CEST	443	56494	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:41.296283960 CEST	56497	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:41.296310902 CEST	443	56497	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:41.296439886 CEST	56497	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:41.296509981 CEST	56498	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:41.296529055 CEST	443	56498	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:41.296607018 CEST	56498	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:41.296760082 CEST	56497	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:41.296791077 CEST	443	56497	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:41.296802998 CEST	56498	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:41.296827078 CEST	443	56498	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:41.390743971 CEST	443	56493	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:41.390924931 CEST	443	56493	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:41.390978098 CEST	56493	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:41.391064882 CEST	56493	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:41.391072989 CEST	443	56493	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:41.391108036 CEST	56493	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:41.391112089 CEST	443	56493	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:41.393814087 CEST	56499	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:41.393840075 CEST	443	56499	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:41.393918037 CEST	56499	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:41.394104004 CEST	56499	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:41.394114017 CEST	443	56499	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:41.728933096 CEST	443	56495	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:41.729820013 CEST	56495	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:41.729911089 CEST	443	56495	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:41.730927944 CEST	56495	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:41.730942965 CEST	443	56495	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:41.836189985 CEST	443	56495	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:41.836282969 CEST	443	56495	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:41.836393118 CEST	56495	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:41.836863995 CEST	56495	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:41.836905956 CEST	443	56495	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:41.836931944 CEST	56495	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:41.836946964 CEST	443	56495	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:41.843319893 CEST	56500	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:41.843364000 CEST	443	56500	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:41.843575001 CEST	56500	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:41.843821049 CEST	56500	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:41.843831062 CEST	443	56500	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:41.934683084 CEST	443	56496	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:41.935811996 CEST	56496	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:41.935842991 CEST	443	56496	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:41.936615944 CEST	56496	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:41.936620951 CEST	443	56496	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:41.974543095 CEST	443	56497	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:41.975102901 CEST	56497	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:41.975125074 CEST	443	56497	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:41.975944996 CEST	56497	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:41.975971937 CEST	443	56497	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:41.979151964 CEST	443	56498	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:41.979542971 CEST	56498	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:41.979563951 CEST	443	56498	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:41.980212927 CEST	56498	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:41.980225086 CEST	443	56498	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.035314083 CEST	443	56496	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.035379887 CEST	443	56496	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.035506964 CEST	56496	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.035747051 CEST	56496	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.035758972 CEST	443	56496	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.035770893 CEST	56496	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.035779953 CEST	443	56496	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.042157888 CEST	56501	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.042198896 CEST	443	56501	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.042268038 CEST	56501	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.042488098 CEST	56501	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.042505980 CEST	443	56501	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.049160957 CEST	443	56499	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.049616098 CEST	56499	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.049623013 CEST	443	56499	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.050236940 CEST	56499	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.050240993 CEST	443	56499	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.104331017 CEST	443	56497	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.104408979 CEST	443	56497	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.104471922 CEST	56497	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.104703903 CEST	56497	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.104743004 CEST	443	56497	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.104769945 CEST	56497	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.104785919 CEST	443	56497	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.109509945 CEST	56502	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.109605074 CEST	443	56502	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.109774113 CEST	56502	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.110090971 CEST	56502	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.110126019 CEST	443	56502	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.127274990 CEST	443	56498	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.127358913 CEST	443	56498	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.127557039 CEST	56498	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.127727985 CEST	56498	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.127746105 CEST	443	56498	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.127768040 CEST	56498	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.127779961 CEST	443	56498	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.130407095 CEST	56503	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.130441904 CEST	443	56503	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.130573034 CEST	56503	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.130743980 CEST	56503	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.130760908 CEST	443	56503	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.149987936 CEST	443	56499	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.150150061 CEST	443	56499	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.150434017 CEST	56499	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.158400059 CEST	56499	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.158413887 CEST	443	56499	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.158425093 CEST	56499	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.158430099 CEST	443	56499	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.186057091 CEST	56504	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.186086893 CEST	443	56504	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.186209917 CEST	56504	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.195408106 CEST	56504	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.195420980 CEST	443	56504	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.531611919 CEST	443	56500	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.532082081 CEST	56500	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.532095909 CEST	443	56500	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.532541990 CEST	56500	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.532547951 CEST	443	56500	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.646503925 CEST	443	56500	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.646573067 CEST	443	56500	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.646774054 CEST	56500	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.646857023 CEST	56500	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.646873951 CEST	443	56500	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.646887064 CEST	56500	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.646899939 CEST	443	56500	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.650181055 CEST	56506	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.650266886 CEST	443	56506	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.650348902 CEST	56506	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.650523901 CEST	56506	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.650564909 CEST	443	56506	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.703985929 CEST	443	56501	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.704559088 CEST	56501	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.704622030 CEST	443	56501	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.704896927 CEST	56501	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.704912901 CEST	443	56501	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.786623955 CEST	443	56502	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.787142992 CEST	56502	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.787164927 CEST	443	56502	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.787724972 CEST	56502	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.787779093 CEST	443	56502	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.804004908 CEST	443	56503	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.806559086 CEST	443	56501	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.806631088 CEST	443	56501	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.806931019 CEST	56501	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.807076931 CEST	56503	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.807087898 CEST	443	56503	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.807486057 CEST	56503	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.807491064 CEST	443	56503	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.807754040 CEST	56501	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.807754993 CEST	56501	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.807790995 CEST	443	56501	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.807815075 CEST	443	56501	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.811069965 CEST	56507	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.811104059 CEST	443	56507	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.811351061 CEST	56507	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.811479092 CEST	56507	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.811491966 CEST	443	56507	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.863620043 CEST	443	56504	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.864284992 CEST	56504	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.864298105 CEST	443	56504	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.864619970 CEST	56504	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.864624023 CEST	443	56504	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.893552065 CEST	443	56502	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.893604994 CEST	443	56502	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.893771887 CEST	56502	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.893867970 CEST	56502	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.893913031 CEST	443	56502	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.893945932 CEST	56502	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.893963099 CEST	443	56502	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.896651983 CEST	56508	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.896739006 CEST	443	56508	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.896848917 CEST	56508	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.897008896 CEST	56508	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.897043943 CEST	443	56508	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.906996965 CEST	443	56503	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.907186985 CEST	443	56503	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.907243013 CEST	56503	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.907314062 CEST	56503	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.907325983 CEST	443	56503	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.907346010 CEST	56503	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.907351971 CEST	443	56503	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.909557104 CEST	56509	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.909601927 CEST	443	56509	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.909683943 CEST	56509	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.909868956 CEST	56509	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.909883976 CEST	443	56509	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.964689016 CEST	443	56504	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.964817047 CEST	443	56504	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.964910984 CEST	56504	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.965500116 CEST	56504	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.965506077 CEST	443	56504	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.965519905 CEST	56504	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.965526104 CEST	443	56504	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.972096920 CEST	56510	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.972119093 CEST	443	56510	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:42.972206116 CEST	56510	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.972459078 CEST	56510	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:42.972471952 CEST	443	56510	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:43.313030005 CEST	443	56506	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:43.314001083 CEST	56506	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:43.314032078 CEST	443	56506	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:43.315185070 CEST	56506	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:43.315191031 CEST	443	56506	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:43.428077936 CEST	443	56506	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:43.428138018 CEST	443	56506	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:43.428541899 CEST	56506	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:43.428541899 CEST	56506	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:43.428541899 CEST	56506	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:43.432446957 CEST	56511	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:43.432545900 CEST	443	56511	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:43.432636023 CEST	56511	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:43.432787895 CEST	56511	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:43.432811975 CEST	443	56511	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:43.470743895 CEST	443	56507	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:43.471348047 CEST	56507	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:43.471379995 CEST	443	56507	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:43.472234964 CEST	56507	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:43.472242117 CEST	443	56507	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:43.546016932 CEST	443	56508	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:43.546701908 CEST	56508	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:43.546736002 CEST	443	56508	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:43.547466040 CEST	56508	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:43.547475100 CEST	443	56508	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:43.571773052 CEST	443	56507	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:43.571947098 CEST	443	56507	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:43.572030067 CEST	56507	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:43.572273970 CEST	56507	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:43.572273970 CEST	56507	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:43.572295904 CEST	443	56507	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:43.572307110 CEST	443	56507	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:43.577485085 CEST	56512	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:43.577513933 CEST	443	56512	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:43.577625990 CEST	56512	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:43.577909946 CEST	56512	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:43.577925920 CEST	443	56512	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:43.602394104 CEST	443	56509	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:43.603051901 CEST	56509	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:43.603069067 CEST	443	56509	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:43.603612900 CEST	56509	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:43.603617907 CEST	443	56509	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:43.632616997 CEST	443	56510	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:43.633534908 CEST	56510	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:43.633550882 CEST	443	56510	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:43.634313107 CEST	56510	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:43.634320021 CEST	443	56510	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:43.647574902 CEST	443	56508	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:43.647716999 CEST	443	56508	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:43.647788048 CEST	56508	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:43.648936987 CEST	56508	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:43.648977995 CEST	443	56508	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:43.652586937 CEST	56513	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:43.652653933 CEST	443	56513	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:43.652728081 CEST	56513	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:43.652883053 CEST	56513	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:43.652909040 CEST	443	56513	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:43.721967936 CEST	443	56509	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:43.722114086 CEST	443	56509	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:43.722208977 CEST	56509	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:43.722388029 CEST	56509	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:43.722398043 CEST	443	56509	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:43.722409964 CEST	56509	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:43.722414017 CEST	443	56509	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:43.725600958 CEST	56506	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:43.725615025 CEST	443	56506	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:43.726324081 CEST	56514	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:43.726336002 CEST	443	56514	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:43.726563931 CEST	56514	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:43.734740019 CEST	443	56510	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:43.734909058 CEST	443	56510	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:43.734962940 CEST	56510	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:43.745387077 CEST	56514	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:43.745414972 CEST	443	56514	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:43.745698929 CEST	56510	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:43.745703936 CEST	443	56510	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:43.745739937 CEST	56510	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:43.745743036 CEST	443	56510	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:43.749725103 CEST	56515	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:43.749789000 CEST	443	56515	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:43.749952078 CEST	56515	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:43.750391960 CEST	56515	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:43.750413895 CEST	443	56515	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:44.125679970 CEST	443	56511	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:44.126255035 CEST	56511	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:44.126343012 CEST	443	56511	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:44.126735926 CEST	56511	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:44.126749992 CEST	443	56511	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:44.234445095 CEST	443	56511	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:44.234544992 CEST	443	56511	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:44.234874964 CEST	56511	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:44.234874964 CEST	56511	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:44.234874964 CEST	56511	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:44.237627029 CEST	56516	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:44.237694979 CEST	443	56516	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:44.238101959 CEST	56516	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:44.238358974 CEST	56516	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:44.238394976 CEST	443	56516	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:44.262078047 CEST	443	56512	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:44.262501955 CEST	56512	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:44.262545109 CEST	443	56512	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:44.262967110 CEST	56512	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:44.262974977 CEST	443	56512	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:44.338499069 CEST	443	56513	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:44.339294910 CEST	56513	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:44.339356899 CEST	443	56513	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:44.340002060 CEST	56513	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:44.340015888 CEST	443	56513	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:44.352248907 CEST	443	56514	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:44.352802038 CEST	56514	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:44.352833033 CEST	443	56514	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:44.353285074 CEST	56514	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:44.353295088 CEST	443	56514	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:44.366671085 CEST	443	56512	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:44.366820097 CEST	443	56512	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:44.367026091 CEST	56512	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:44.367183924 CEST	56512	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:44.367207050 CEST	443	56512	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:44.367221117 CEST	56512	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:44.367228031 CEST	443	56512	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:44.370157003 CEST	56517	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:44.370193005 CEST	443	56517	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:44.370451927 CEST	56517	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:44.370623112 CEST	56517	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:44.370632887 CEST	443	56517	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:44.440016985 CEST	443	56515	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:44.440660954 CEST	56515	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:44.440711975 CEST	443	56515	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:44.441152096 CEST	56515	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:44.441160917 CEST	443	56515	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:44.442663908 CEST	443	56513	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:44.442739010 CEST	443	56513	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:44.442807913 CEST	56513	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:44.443036079 CEST	56513	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:44.443058968 CEST	443	56513	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:44.443074942 CEST	56513	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:44.443083048 CEST	443	56513	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:44.446180105 CEST	56518	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:44.446201086 CEST	443	56518	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:44.446261883 CEST	56518	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:44.446383953 CEST	56518	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:44.446392059 CEST	443	56518	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:44.455252886 CEST	443	56514	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:44.455322027 CEST	443	56514	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:44.455375910 CEST	56514	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:44.455580950 CEST	56514	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:44.455594063 CEST	443	56514	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:44.455605984 CEST	56514	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:44.455611944 CEST	443	56514	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:44.457743883 CEST	56519	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:44.457798958 CEST	443	56519	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:44.457861900 CEST	56519	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:44.458012104 CEST	56519	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:44.458028078 CEST	443	56519	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:44.538141966 CEST	56511	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:44.538211107 CEST	443	56511	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:44.540894985 CEST	443	56515	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:44.541054964 CEST	443	56515	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:44.541107893 CEST	56515	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:44.541300058 CEST	56515	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:44.541321993 CEST	443	56515	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:44.541337967 CEST	56515	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:44.541346073 CEST	443	56515	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:44.544924021 CEST	56520	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:44.544961929 CEST	443	56520	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:44.545360088 CEST	56520	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:44.545598984 CEST	56520	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:44.545619965 CEST	443	56520	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:44.894802094 CEST	443	56516	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:44.895490885 CEST	56516	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:44.895571947 CEST	443	56516	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:44.896226883 CEST	56516	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:44.896239996 CEST	443	56516	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:44.998276949 CEST	443	56516	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:44.998385906 CEST	443	56516	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:44.998454094 CEST	56516	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:44.998682976 CEST	56516	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:44.998712063 CEST	443	56516	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:44.998728991 CEST	56516	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:44.998738050 CEST	443	56516	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.001688004 CEST	56521	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.001739979 CEST	443	56521	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.001940012 CEST	56521	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.002144098 CEST	56521	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.002156973 CEST	443	56521	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.042825937 CEST	443	56517	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.043309927 CEST	56517	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.043329000 CEST	443	56517	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.043761969 CEST	56517	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.043770075 CEST	443	56517	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.113276005 CEST	443	56518	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.113737106 CEST	56518	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.113765001 CEST	443	56518	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.114137888 CEST	56518	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.114145994 CEST	443	56518	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.122549057 CEST	443	56519	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.122881889 CEST	56519	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.122977018 CEST	443	56519	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.123236895 CEST	56519	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.123251915 CEST	443	56519	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.145226955 CEST	443	56517	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.145328999 CEST	443	56517	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.145394087 CEST	56517	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.145498037 CEST	56517	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.145514965 CEST	443	56517	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.145612001 CEST	56517	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.145620108 CEST	443	56517	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.148294926 CEST	56522	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.148406029 CEST	443	56522	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.148575068 CEST	56522	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.148720026 CEST	56522	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.148750067 CEST	443	56522	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.199233055 CEST	443	56520	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.199754000 CEST	56520	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.199774981 CEST	443	56520	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.200462103 CEST	56520	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.200469017 CEST	443	56520	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.216444016 CEST	443	56518	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.216597080 CEST	443	56518	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.216676950 CEST	56518	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.216742039 CEST	56518	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.216764927 CEST	443	56518	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.216779947 CEST	56518	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.216787100 CEST	443	56518	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.219397068 CEST	56523	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.219424009 CEST	443	56523	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.219605923 CEST	56523	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.219763041 CEST	56523	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.219775915 CEST	443	56523	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.225735903 CEST	443	56519	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.225882053 CEST	443	56519	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.225963116 CEST	56519	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.226053953 CEST	56519	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.226053953 CEST	56519	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.226099014 CEST	443	56519	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.226125956 CEST	443	56519	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.227961063 CEST	56524	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.227992058 CEST	443	56524	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.228121996 CEST	56524	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.228285074 CEST	56524	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.228298903 CEST	443	56524	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.302913904 CEST	443	56520	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.302999973 CEST	443	56520	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.303052902 CEST	56520	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.303236008 CEST	56520	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.303247929 CEST	443	56520	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.303256989 CEST	56520	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.303261995 CEST	443	56520	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.306261063 CEST	56525	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.306370974 CEST	443	56525	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.306438923 CEST	56525	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.306611061 CEST	56525	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.306638956 CEST	443	56525	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.652036905 CEST	443	56521	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.652673960 CEST	56521	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.652719975 CEST	443	56521	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.653162003 CEST	56521	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.653175116 CEST	443	56521	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.754064083 CEST	443	56521	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.754127026 CEST	443	56521	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.754376888 CEST	56521	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.754376888 CEST	56521	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.754432917 CEST	56521	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.754458904 CEST	443	56521	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.757193089 CEST	56526	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.757286072 CEST	443	56526	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.757477999 CEST	56526	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.757548094 CEST	56526	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.757569075 CEST	443	56526	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.809530973 CEST	443	56522	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.809973001 CEST	56522	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.810014009 CEST	443	56522	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.810458899 CEST	56522	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.810471058 CEST	443	56522	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.883986950 CEST	443	56523	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.884465933 CEST	56523	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.884474993 CEST	443	56523	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.885235071 CEST	56523	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.885238886 CEST	443	56523	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.885257006 CEST	443	56524	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.885541916 CEST	56524	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.885560989 CEST	443	56524	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.888468981 CEST	56524	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.888473034 CEST	443	56524	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.911046982 CEST	443	56522	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.911170006 CEST	443	56522	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.911878109 CEST	56522	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.911878109 CEST	56522	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.911878109 CEST	56522	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.914223909 CEST	56527	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.914268017 CEST	443	56527	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.914427042 CEST	56527	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.914554119 CEST	56527	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.914572001 CEST	443	56527	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.985481024 CEST	443	56523	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.985632896 CEST	443	56523	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.985872030 CEST	56523	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.985918045 CEST	56523	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.985918045 CEST	56523	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.985930920 CEST	443	56523	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.985944033 CEST	443	56523	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.988230944 CEST	443	56525	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.988698959 CEST	443	56524	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.988775969 CEST	443	56524	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.988780975 CEST	56525	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.988864899 CEST	443	56525	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.988986969 CEST	56524	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.989120960 CEST	56528	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.989135981 CEST	56524	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.989150047 CEST	443	56524	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.989165068 CEST	443	56528	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.989196062 CEST	56524	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.989202976 CEST	443	56524	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.989231110 CEST	56528	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.989343882 CEST	56525	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.989357948 CEST	443	56525	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.989413023 CEST	56528	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.989430904 CEST	443	56528	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.991453886 CEST	56529	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.991507053 CEST	443	56529	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:45.991945028 CEST	56529	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.991945028 CEST	56529	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:45.992010117 CEST	443	56529	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:46.102721930 CEST	443	56525	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:46.102850914 CEST	443	56525	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:46.103174925 CEST	56525	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:46.103174925 CEST	56525	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:46.103174925 CEST	56525	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:46.105703115 CEST	56530	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:46.105735064 CEST	443	56530	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:46.105948925 CEST	56530	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:46.105948925 CEST	56530	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:46.105994940 CEST	443	56530	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:46.225639105 CEST	56522	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:46.225663900 CEST	443	56522	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:46.413316965 CEST	56525	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:46.413381100 CEST	443	56525	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:46.610075951 CEST	443	56526	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:46.610579014 CEST	56526	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:46.610661983 CEST	443	56526	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:46.611103058 CEST	56526	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:46.611115932 CEST	443	56526	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:46.638551950 CEST	443	56527	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:46.639033079 CEST	56527	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:46.639055967 CEST	443	56527	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:46.639445066 CEST	56527	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:46.639450073 CEST	443	56527	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:46.667010069 CEST	443	56529	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:46.667391062 CEST	56529	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:46.667470932 CEST	443	56529	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:46.667793989 CEST	56529	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:46.667808056 CEST	443	56529	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:46.681045055 CEST	443	56528	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:46.681374073 CEST	56528	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:46.681391954 CEST	443	56528	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:46.681763887 CEST	56528	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:46.681771994 CEST	443	56528	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:46.742062092 CEST	443	56526	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:46.742125988 CEST	443	56526	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:46.742477894 CEST	56526	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:46.742479086 CEST	56526	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:46.742479086 CEST	56526	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:46.745220900 CEST	56531	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:46.745266914 CEST	443	56531	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:46.745414019 CEST	56531	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:46.745551109 CEST	56531	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:46.745563030 CEST	443	56531	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:46.753705978 CEST	443	56527	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:46.753859997 CEST	443	56527	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:46.753915071 CEST	56527	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:46.753983021 CEST	56527	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:46.753983021 CEST	56527	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:46.754005909 CEST	443	56527	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:46.754024029 CEST	443	56527	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:46.755961895 CEST	56532	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:46.756042957 CEST	443	56532	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:46.756251097 CEST	56532	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:46.756411076 CEST	56532	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:46.756445885 CEST	443	56532	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:46.762726068 CEST	443	56530	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:46.763109922 CEST	56530	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:46.763170004 CEST	443	56530	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:46.763536930 CEST	56530	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:46.763550043 CEST	443	56530	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:46.769964933 CEST	443	56529	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:46.770098925 CEST	443	56529	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:46.770158052 CEST	56529	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:46.770206928 CEST	56529	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:46.770206928 CEST	56529	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:46.770236969 CEST	443	56529	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:46.770258904 CEST	443	56529	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:46.772108078 CEST	56533	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:46.772138119 CEST	443	56533	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:46.772201061 CEST	56533	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:46.772382021 CEST	56533	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:46.772397995 CEST	443	56533	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:46.787225962 CEST	443	56528	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:46.787355900 CEST	443	56528	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:46.787497044 CEST	56528	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:46.787532091 CEST	56528	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:46.787532091 CEST	56528	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:46.787550926 CEST	443	56528	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:46.787563086 CEST	443	56528	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:46.789701939 CEST	56534	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:46.789715052 CEST	443	56534	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:46.789791107 CEST	56534	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:46.789961100 CEST	56534	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:46.789975882 CEST	443	56534	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:46.862885952 CEST	443	56530	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:46.863003016 CEST	443	56530	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:46.863126993 CEST	56530	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:46.863190889 CEST	56530	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:46.863190889 CEST	56530	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:46.863210917 CEST	443	56530	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:46.863231897 CEST	443	56530	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:46.865010977 CEST	56535	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:46.865099907 CEST	443	56535	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:46.865261078 CEST	56535	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:46.865390062 CEST	56535	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:46.865427017 CEST	443	56535	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:46.970624924 CEST	56536	443	192.168.2.4	216.58.212.132
Oct 13, 2024 17:52:46.970712900 CEST	443	56536	216.58.212.132	192.168.2.4
Oct 13, 2024 17:52:46.970808029 CEST	56536	443	192.168.2.4	216.58.212.132
Oct 13, 2024 17:52:46.971065044 CEST	56536	443	192.168.2.4	216.58.212.132
Oct 13, 2024 17:52:46.971100092 CEST	443	56536	216.58.212.132	192.168.2.4
Oct 13, 2024 17:52:47.053750992 CEST	56526	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:47.053795099 CEST	443	56526	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:47.430986881 CEST	443	56532	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:47.431240082 CEST	443	56533	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:47.432060003 CEST	443	56531	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:47.432400942 CEST	56532	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:47.432462931 CEST	443	56532	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:47.434293032 CEST	56532	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:47.434308052 CEST	443	56532	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:47.434521914 CEST	56533	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:47.434576035 CEST	443	56533	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:47.434952974 CEST	56533	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:47.434959888 CEST	443	56533	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:47.435195923 CEST	56531	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:47.435225964 CEST	443	56531	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:47.435575008 CEST	56531	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:47.435583115 CEST	443	56531	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:47.444825888 CEST	443	56534	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:47.445168018 CEST	56534	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:47.445188046 CEST	443	56534	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:47.445707083 CEST	56534	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:47.445713997 CEST	443	56534	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:47.525521040 CEST	443	56535	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:47.526323080 CEST	56535	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:47.526365042 CEST	443	56535	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:47.526978970 CEST	56535	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:47.526993990 CEST	443	56535	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:47.532167912 CEST	443	56532	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:47.532341957 CEST	443	56532	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:47.532363892 CEST	443	56533	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:47.532407999 CEST	56532	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:47.532438040 CEST	443	56533	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:47.532501936 CEST	56532	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:47.532522917 CEST	443	56532	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:47.532536983 CEST	56532	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:47.532543898 CEST	443	56532	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:47.532572031 CEST	56533	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:47.532572031 CEST	56533	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:47.532572031 CEST	56533	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:47.537600994 CEST	443	56531	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:47.537694931 CEST	443	56531	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:47.537759066 CEST	56531	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:47.542476892 CEST	56537	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:47.542526960 CEST	443	56537	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:47.542592049 CEST	56537	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:47.543977976 CEST	56538	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:47.544012070 CEST	443	56538	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:47.544137001 CEST	56538	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:47.544280052 CEST	56538	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:47.544297934 CEST	443	56538	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:47.544553995 CEST	56531	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:47.544574022 CEST	443	56531	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:47.545109034 CEST	443	56534	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:47.545255899 CEST	443	56534	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:47.545334101 CEST	56534	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:47.546032906 CEST	56537	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:47.546057940 CEST	443	56537	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:47.546643019 CEST	56534	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:47.546643019 CEST	56534	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:47.546669006 CEST	443	56534	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:47.546685934 CEST	443	56534	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:47.549601078 CEST	56539	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:47.549691916 CEST	443	56539	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:47.549828053 CEST	56539	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:47.551680088 CEST	56540	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:47.551739931 CEST	443	56540	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:47.551846981 CEST	56540	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:47.551970005 CEST	56539	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:47.552018881 CEST	443	56539	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:47.552337885 CEST	56540	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:47.552366018 CEST	443	56540	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:47.613775015 CEST	443	56536	216.58.212.132	192.168.2.4
Oct 13, 2024 17:52:47.618530035 CEST	56536	443	192.168.2.4	216.58.212.132
Oct 13, 2024 17:52:47.618566036 CEST	443	56536	216.58.212.132	192.168.2.4
Oct 13, 2024 17:52:47.619653940 CEST	443	56536	216.58.212.132	192.168.2.4
Oct 13, 2024 17:52:47.620959044 CEST	56536	443	192.168.2.4	216.58.212.132
Oct 13, 2024 17:52:47.621332884 CEST	443	56536	216.58.212.132	192.168.2.4
Oct 13, 2024 17:52:47.627255917 CEST	443	56535	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:47.627410889 CEST	443	56535	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:47.627803087 CEST	56535	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:47.627907991 CEST	56535	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:47.627928019 CEST	443	56535	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:47.627934933 CEST	56535	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:47.627940893 CEST	443	56535	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:47.637078047 CEST	56541	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:47.637109995 CEST	443	56541	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:47.637234926 CEST	56541	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:47.637599945 CEST	56541	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:47.637614965 CEST	443	56541	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:47.661793947 CEST	56536	443	192.168.2.4	216.58.212.132
Oct 13, 2024 17:52:47.833642006 CEST	56533	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:47.833677053 CEST	443	56533	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:48.208568096 CEST	443	56537	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:48.217957973 CEST	443	56539	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:48.242768049 CEST	443	56538	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:48.243742943 CEST	443	56540	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:48.255506992 CEST	56537	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:48.271152973 CEST	56539	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:48.280808926 CEST	56540	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:48.280906916 CEST	443	56540	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:48.281783104 CEST	56540	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:48.281797886 CEST	443	56540	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:48.282253981 CEST	56537	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:48.282263994 CEST	443	56537	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:48.283035994 CEST	56537	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:48.283041000 CEST	443	56537	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:48.283298969 CEST	56539	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:48.283309937 CEST	56538	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:48.283329964 CEST	443	56539	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:48.283966064 CEST	56539	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:48.283979893 CEST	443	56539	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:48.284706116 CEST	56538	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:48.284710884 CEST	443	56538	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:48.285918951 CEST	56538	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:48.285928011 CEST	443	56538	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:48.340157032 CEST	443	56541	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:48.358345985 CEST	56541	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:48.358361959 CEST	443	56541	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:48.359181881 CEST	56541	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:48.359189034 CEST	443	56541	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:48.381419897 CEST	443	56537	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:48.381584883 CEST	443	56537	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:48.381719112 CEST	56537	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:48.382148981 CEST	443	56539	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:48.382297993 CEST	443	56539	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:48.382420063 CEST	56539	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:48.382983923 CEST	443	56540	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:48.383133888 CEST	443	56540	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:48.383184910 CEST	56540	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:48.384218931 CEST	56537	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:48.384243011 CEST	443	56537	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:48.385891914 CEST	56539	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:48.385941029 CEST	443	56539	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:48.385971069 CEST	56539	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:48.385987997 CEST	443	56539	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:48.386964083 CEST	56540	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:48.386991024 CEST	443	56540	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:48.387005091 CEST	56540	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:48.387012959 CEST	443	56540	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:48.389353991 CEST	443	56538	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:48.389425039 CEST	443	56538	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:48.389472961 CEST	56538	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:48.390619040 CEST	56542	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:48.390649080 CEST	443	56542	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:48.390902042 CEST	56542	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:48.391566992 CEST	56538	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:48.391583920 CEST	443	56538	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:48.391596079 CEST	56538	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:48.391602039 CEST	443	56538	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:48.394051075 CEST	56542	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:48.394064903 CEST	443	56542	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:48.395942926 CEST	56543	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:48.395987034 CEST	443	56543	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:48.396182060 CEST	56543	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:48.396976948 CEST	56544	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:48.396991014 CEST	443	56544	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:48.397274017 CEST	56544	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:48.397382021 CEST	56544	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:48.397403002 CEST	443	56544	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:48.397500038 CEST	56543	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:48.397512913 CEST	443	56543	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:48.398273945 CEST	56545	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:48.398291111 CEST	443	56545	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:48.398444891 CEST	56545	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:48.398590088 CEST	56545	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:48.398602962 CEST	443	56545	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:48.462050915 CEST	443	56541	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:48.462194920 CEST	443	56541	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:48.462367058 CEST	56541	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:48.462436914 CEST	56541	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:48.462456942 CEST	443	56541	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:48.462471008 CEST	56541	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:48.462477922 CEST	443	56541	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:48.465289116 CEST	56546	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:48.465312958 CEST	443	56546	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:48.465370893 CEST	56546	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:48.465563059 CEST	56546	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:48.465579987 CEST	443	56546	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.047859907 CEST	443	56544	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.048777103 CEST	56544	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.048846960 CEST	443	56544	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.049926043 CEST	56544	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.049938917 CEST	443	56544	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.072678089 CEST	443	56542	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.073170900 CEST	56542	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.073180914 CEST	443	56542	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.073724031 CEST	56542	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.073729992 CEST	443	56542	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.120863914 CEST	443	56543	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.121876955 CEST	56543	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.121932030 CEST	443	56543	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.122688055 CEST	56543	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.122693062 CEST	443	56543	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.128554106 CEST	443	56546	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.129539967 CEST	56546	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.129553080 CEST	443	56546	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.130450964 CEST	56546	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.130458117 CEST	443	56546	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.149476051 CEST	443	56544	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.149591923 CEST	443	56544	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.149708986 CEST	56544	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.149962902 CEST	56544	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.149981022 CEST	443	56544	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.150028944 CEST	56544	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.150034904 CEST	443	56544	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.154314041 CEST	56547	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.154346943 CEST	443	56547	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.154494047 CEST	56547	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.154913902 CEST	56547	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.154926062 CEST	443	56547	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.163908005 CEST	443	56545	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.164536953 CEST	56545	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.164546013 CEST	443	56545	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.165364027 CEST	56545	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.165369034 CEST	443	56545	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.178276062 CEST	443	56542	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.178425074 CEST	443	56542	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.178473949 CEST	56542	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.178787947 CEST	56542	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.178801060 CEST	443	56542	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.183784008 CEST	56548	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.183830976 CEST	443	56548	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.183900118 CEST	56548	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.184171915 CEST	56548	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.184189081 CEST	443	56548	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.224258900 CEST	443	56543	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.224320889 CEST	443	56543	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.224426985 CEST	56543	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.224569082 CEST	56543	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.224569082 CEST	56543	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.224616051 CEST	443	56543	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.224643946 CEST	443	56543	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.228755951 CEST	56549	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.228792906 CEST	443	56549	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.228981972 CEST	56549	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.229211092 CEST	56549	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.229223013 CEST	443	56549	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.260276079 CEST	443	56546	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.260359049 CEST	443	56546	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.260411978 CEST	56546	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.260662079 CEST	56546	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.260675907 CEST	443	56546	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.260687113 CEST	56546	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.260694027 CEST	443	56546	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.265887976 CEST	56550	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.265925884 CEST	443	56550	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.266310930 CEST	56550	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.266510963 CEST	56550	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.266525984 CEST	443	56550	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.270162106 CEST	443	56545	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.270287991 CEST	443	56545	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.270347118 CEST	56545	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.270534039 CEST	56545	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.270540953 CEST	443	56545	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.270555973 CEST	56545	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.270560026 CEST	443	56545	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.273289919 CEST	56551	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.273339987 CEST	443	56551	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.273461103 CEST	56551	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.276412964 CEST	56551	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.276432037 CEST	443	56551	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.807936907 CEST	443	56547	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.808425903 CEST	56547	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.808489084 CEST	443	56547	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.809077978 CEST	56547	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.809092999 CEST	443	56547	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.878971100 CEST	443	56549	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.879493952 CEST	56549	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.879508972 CEST	443	56549	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.879961014 CEST	56549	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.879966974 CEST	443	56549	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.884778976 CEST	443	56548	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.885143042 CEST	56548	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.885186911 CEST	443	56548	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.885612965 CEST	56548	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.885620117 CEST	443	56548	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.908049107 CEST	443	56547	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.908199072 CEST	443	56547	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.908267975 CEST	56547	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.908338070 CEST	56547	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.908338070 CEST	56547	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.908377886 CEST	443	56547	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.908401966 CEST	443	56547	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.911190987 CEST	56552	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.911236048 CEST	443	56552	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.911412954 CEST	56552	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.911541939 CEST	56552	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.911552906 CEST	443	56552	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.926095963 CEST	443	56550	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.926516056 CEST	56550	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.926531076 CEST	443	56550	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.926956892 CEST	56550	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.926961899 CEST	443	56550	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.953552008 CEST	443	56551	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.953974962 CEST	56551	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.953999043 CEST	443	56551	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.954386950 CEST	56551	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.954397917 CEST	443	56551	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.980192900 CEST	443	56549	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.980273962 CEST	443	56549	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.980443001 CEST	56549	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.980465889 CEST	56549	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.980484009 CEST	443	56549	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.980494976 CEST	56549	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.980500937 CEST	443	56549	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.983072996 CEST	56553	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.983130932 CEST	443	56553	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.983370066 CEST	56553	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.983513117 CEST	56553	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.983526945 CEST	443	56553	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.991800070 CEST	443	56548	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.991951942 CEST	443	56548	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.992050886 CEST	56548	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.992168903 CEST	56548	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.992207050 CEST	443	56548	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.992238998 CEST	56548	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.992254019 CEST	443	56548	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.994343042 CEST	56554	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.994352102 CEST	443	56554	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:49.994540930 CEST	56554	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.994687080 CEST	56554	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:49.994697094 CEST	443	56554	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.025732040 CEST	443	56550	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.025881052 CEST	443	56550	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.025958061 CEST	56550	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:50.026041985 CEST	56550	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:50.026057959 CEST	443	56550	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.026076078 CEST	56550	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:50.026082039 CEST	443	56550	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.028564930 CEST	56555	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:50.028608084 CEST	443	56555	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.028692961 CEST	56555	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:50.028817892 CEST	56555	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:50.028825998 CEST	443	56555	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.056360006 CEST	443	56551	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.056530952 CEST	443	56551	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.056600094 CEST	56551	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:50.060409069 CEST	56551	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:50.060441017 CEST	443	56551	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.060472012 CEST	56551	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:50.060484886 CEST	443	56551	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.063597918 CEST	56556	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:50.063640118 CEST	443	56556	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.063709021 CEST	56556	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:50.063841105 CEST	56556	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:50.063852072 CEST	443	56556	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.567764997 CEST	443	56552	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.568708897 CEST	56552	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:50.568731070 CEST	443	56552	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.569819927 CEST	56552	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:50.569828033 CEST	443	56552	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.633071899 CEST	443	56553	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.633601904 CEST	56553	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:50.633627892 CEST	443	56553	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.634668112 CEST	56553	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:50.634677887 CEST	443	56553	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.646449089 CEST	443	56554	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.650417089 CEST	56554	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:50.650417089 CEST	56554	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:50.650437117 CEST	443	56554	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.650456905 CEST	443	56554	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.668128967 CEST	443	56552	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.668180943 CEST	443	56552	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.668308973 CEST	443	56552	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.668319941 CEST	56552	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:50.668360949 CEST	56552	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:50.668462038 CEST	56552	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:50.668483019 CEST	443	56552	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.668498039 CEST	56552	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:50.668504000 CEST	443	56552	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.674326897 CEST	56557	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:50.674429893 CEST	443	56557	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.674520969 CEST	56557	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:50.674879074 CEST	56557	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:50.674916983 CEST	443	56557	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.720355034 CEST	443	56555	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.720881939 CEST	56555	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:50.720902920 CEST	443	56555	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.721997976 CEST	56555	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:50.722007990 CEST	443	56555	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.736063004 CEST	443	56553	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.736157894 CEST	443	56553	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.736287117 CEST	56553	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:50.748250008 CEST	56553	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:50.748275995 CEST	443	56553	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.748682022 CEST	443	56554	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.748902082 CEST	443	56554	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.748956919 CEST	56554	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:50.749258995 CEST	56554	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:50.749258995 CEST	56554	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:50.749265909 CEST	443	56554	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.749277115 CEST	443	56554	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.758662939 CEST	443	56556	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.758850098 CEST	56558	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:50.758950949 CEST	443	56558	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.759052038 CEST	56558	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:50.759558916 CEST	56558	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:50.759596109 CEST	443	56558	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.759896040 CEST	56556	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:50.759941101 CEST	443	56556	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.760597944 CEST	56556	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:50.760611057 CEST	443	56556	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.761280060 CEST	56559	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:50.761338949 CEST	443	56559	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.761410952 CEST	56559	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:50.761698961 CEST	56559	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:50.761725903 CEST	443	56559	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.824888945 CEST	443	56555	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.824944019 CEST	443	56555	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.825090885 CEST	443	56555	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.825150013 CEST	56555	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:50.825340033 CEST	56555	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:50.825361013 CEST	443	56555	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.825372934 CEST	56555	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:50.825380087 CEST	443	56555	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.828805923 CEST	56560	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:50.828890085 CEST	443	56560	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.829000950 CEST	56560	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:50.829190969 CEST	56560	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:50.829222918 CEST	443	56560	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.865511894 CEST	443	56556	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.865576029 CEST	443	56556	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.865648031 CEST	56556	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:50.865710974 CEST	443	56556	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.865748882 CEST	443	56556	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.865772009 CEST	56556	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:50.865799904 CEST	56556	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:50.866226912 CEST	56556	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:50.866266012 CEST	443	56556	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.866293907 CEST	56556	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:50.866308928 CEST	443	56556	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.870729923 CEST	56561	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:50.870836973 CEST	443	56561	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:50.870914936 CEST	56561	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:50.871069908 CEST	56561	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:50.871098042 CEST	443	56561	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:51.334686995 CEST	443	56557	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:51.335314035 CEST	56557	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:51.335378885 CEST	443	56557	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:51.336040974 CEST	56557	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:51.336055994 CEST	443	56557	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:51.420897007 CEST	443	56559	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:51.422449112 CEST	443	56558	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:51.435688972 CEST	56559	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:51.435714960 CEST	443	56559	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:51.435970068 CEST	443	56557	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:51.435987949 CEST	443	56557	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:51.436038971 CEST	56557	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:51.436041117 CEST	443	56557	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:51.436290026 CEST	56557	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:51.436809063 CEST	56559	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:51.436815023 CEST	443	56559	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:51.436897039 CEST	56558	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:51.436907053 CEST	443	56558	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:51.437571049 CEST	56558	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:51.437576056 CEST	443	56558	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:51.437931061 CEST	56557	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:51.437943935 CEST	443	56557	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:51.437954903 CEST	56557	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:51.437959909 CEST	443	56557	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:51.443032026 CEST	56562	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:51.443073988 CEST	443	56562	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:51.443133116 CEST	56562	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:51.443253994 CEST	56562	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:51.443273067 CEST	443	56562	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:51.479882002 CEST	443	56560	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:51.480335951 CEST	56560	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:51.480350971 CEST	443	56560	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:51.480782986 CEST	56560	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:51.480787992 CEST	443	56560	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:51.534287930 CEST	443	56559	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:51.534374952 CEST	443	56559	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:51.534586906 CEST	56559	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:51.534703016 CEST	56559	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:51.534751892 CEST	443	56559	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:51.534770012 CEST	56559	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:51.534787893 CEST	443	56559	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:51.535206079 CEST	443	56558	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:51.535368919 CEST	443	56558	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:51.535684109 CEST	56558	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:51.535830021 CEST	56558	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:51.535876989 CEST	443	56558	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:51.535895109 CEST	56558	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:51.535909891 CEST	443	56558	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:51.538527966 CEST	56563	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:51.538558960 CEST	443	56563	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:51.538798094 CEST	56563	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:51.538815022 CEST	56564	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:51.538852930 CEST	443	56564	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:51.539006948 CEST	56563	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:51.539016962 CEST	443	56563	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:51.539038897 CEST	56564	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:51.539247036 CEST	56564	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:51.539263010 CEST	443	56564	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:51.552114964 CEST	443	56561	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:51.552618980 CEST	56561	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:51.552639961 CEST	443	56561	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:51.553345919 CEST	56561	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:51.553371906 CEST	443	56561	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:51.582844019 CEST	443	56560	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:51.582994938 CEST	443	56560	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:51.583142042 CEST	56560	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:51.583168983 CEST	56560	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:51.583178043 CEST	443	56560	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:51.583187103 CEST	56560	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:51.583190918 CEST	443	56560	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:51.585825920 CEST	56565	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:51.585865021 CEST	443	56565	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:51.586225033 CEST	56565	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:51.586225033 CEST	56565	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:51.586366892 CEST	443	56565	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:51.656199932 CEST	443	56561	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:51.656631947 CEST	443	56561	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:51.656786919 CEST	56561	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:51.656786919 CEST	56561	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:51.656786919 CEST	56561	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:51.659636974 CEST	56566	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:51.659672976 CEST	443	56566	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:51.659840107 CEST	56566	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:51.660010099 CEST	56566	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:51.660024881 CEST	443	56566	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:51.958655119 CEST	56561	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:51.958668947 CEST	443	56561	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:52.026957989 CEST	443	56562	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:52.027492046 CEST	56562	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:52.027506113 CEST	443	56562	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:52.028067112 CEST	56562	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:52.028073072 CEST	443	56562	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:52.128317118 CEST	443	56562	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:52.128580093 CEST	443	56562	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:52.128640890 CEST	56562	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:52.128961086 CEST	56562	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:52.128981113 CEST	443	56562	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:52.128997087 CEST	56562	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:52.129004955 CEST	443	56562	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:52.132956982 CEST	56567	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:52.133009911 CEST	443	56567	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:52.133128881 CEST	56567	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:52.133290052 CEST	56567	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:52.133316040 CEST	443	56567	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:52.214817047 CEST	443	56564	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:52.215409994 CEST	56564	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:52.215435028 CEST	443	56564	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:52.216265917 CEST	56564	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:52.216275930 CEST	443	56564	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:52.226291895 CEST	443	56563	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:52.226958990 CEST	56563	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:52.226977110 CEST	443	56563	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:52.227411985 CEST	56563	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:52.227417946 CEST	443	56563	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:52.245357990 CEST	443	56565	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:52.245796919 CEST	56565	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:52.245827913 CEST	443	56565	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:52.246396065 CEST	56565	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:52.246416092 CEST	443	56565	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:52.325949907 CEST	443	56564	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:52.326051950 CEST	443	56564	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:52.326189041 CEST	56564	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:52.326303005 CEST	56564	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:52.326303005 CEST	56564	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:52.326334953 CEST	443	56564	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:52.326348066 CEST	443	56564	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:52.329663992 CEST	56568	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:52.329705954 CEST	443	56568	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:52.329900980 CEST	56568	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:52.330080032 CEST	56568	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:52.330094099 CEST	443	56568	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:52.332060099 CEST	443	56563	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:52.332212925 CEST	443	56563	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:52.332283974 CEST	56563	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:52.332353115 CEST	56563	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:52.332353115 CEST	56563	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:52.332367897 CEST	443	56563	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:52.332380056 CEST	443	56563	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:52.332674980 CEST	443	56566	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:52.333340883 CEST	56566	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:52.333406925 CEST	443	56566	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:52.333924055 CEST	56566	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:52.333939075 CEST	443	56566	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:52.335434914 CEST	56569	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:52.335541010 CEST	443	56569	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:52.335767031 CEST	56569	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:52.335956097 CEST	56569	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:52.335989952 CEST	443	56569	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:52.345329046 CEST	443	56565	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:52.345494032 CEST	443	56565	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:52.345685005 CEST	56565	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:52.345685005 CEST	56565	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:52.345685005 CEST	56565	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:52.348138094 CEST	56570	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:52.348176956 CEST	443	56570	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:52.348248959 CEST	56570	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:52.348412991 CEST	56570	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:52.348437071 CEST	443	56570	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:52.432136059 CEST	443	56566	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:52.432477951 CEST	443	56566	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:52.432543039 CEST	56566	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:52.432591915 CEST	56566	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:52.432610035 CEST	443	56566	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:52.432621002 CEST	56566	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:52.432626009 CEST	443	56566	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:52.435543060 CEST	56571	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:52.435638905 CEST	443	56571	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:52.435707092 CEST	56571	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:52.435887098 CEST	56571	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:52.435919046 CEST	443	56571	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:52.646176100 CEST	56565	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:52.646250010 CEST	443	56565	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:52.813596964 CEST	443	56567	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:52.814559937 CEST	56567	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:52.814580917 CEST	443	56567	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:52.815670013 CEST	56567	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:52.815690994 CEST	443	56567	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:52.921504021 CEST	443	56567	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:52.921585083 CEST	443	56567	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:52.921638966 CEST	56567	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:52.921971083 CEST	56567	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:52.921997070 CEST	443	56567	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:52.922010899 CEST	56567	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:52.922019005 CEST	443	56567	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:52.925561905 CEST	56572	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:52.925606012 CEST	443	56572	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:52.925681114 CEST	56572	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:52.925931931 CEST	56572	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:52.925946951 CEST	443	56572	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:52.995763063 CEST	443	56568	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:52.996408939 CEST	56568	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:52.996438980 CEST	443	56568	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:52.996906996 CEST	56568	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:52.996912003 CEST	443	56568	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.000624895 CEST	443	56569	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.001091003 CEST	56569	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.001111984 CEST	443	56569	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.001436949 CEST	56569	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.001442909 CEST	443	56569	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.005867958 CEST	443	56570	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.006268978 CEST	56570	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.006282091 CEST	443	56570	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.006659985 CEST	56570	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.006668091 CEST	443	56570	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.085258007 CEST	443	56571	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.086059093 CEST	56571	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.086081982 CEST	443	56571	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.086540937 CEST	56571	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.086549044 CEST	443	56571	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.109338999 CEST	443	56568	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.109417915 CEST	443	56568	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.109481096 CEST	56568	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.109771013 CEST	56568	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.109771013 CEST	56568	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.109798908 CEST	443	56568	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.109812021 CEST	443	56568	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.111219883 CEST	443	56569	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.111251116 CEST	443	56569	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.111306906 CEST	56569	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.111320972 CEST	443	56569	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.111454964 CEST	56569	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.111519098 CEST	56569	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.111531973 CEST	443	56569	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.111541033 CEST	56569	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.111546993 CEST	443	56569	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.113121033 CEST	56573	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.113157988 CEST	443	56573	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.113286972 CEST	56573	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.113347054 CEST	443	56570	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.113445044 CEST	56573	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.113456011 CEST	443	56573	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.113512993 CEST	56574	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.113521099 CEST	443	56574	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.113576889 CEST	56574	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.113725901 CEST	56574	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.113727093 CEST	443	56570	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.113745928 CEST	443	56574	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.113791943 CEST	56570	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.113842964 CEST	56570	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.113850117 CEST	443	56570	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.113859892 CEST	56570	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.113864899 CEST	443	56570	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.116241932 CEST	56575	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.116290092 CEST	443	56575	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.116354942 CEST	56575	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.116569996 CEST	56575	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.116590977 CEST	443	56575	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.186372042 CEST	443	56571	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.186469078 CEST	443	56571	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.186582088 CEST	443	56571	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.186649084 CEST	56571	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.186817884 CEST	56571	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.186836958 CEST	443	56571	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.186849117 CEST	56571	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.186856985 CEST	443	56571	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.190093040 CEST	56576	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.190135002 CEST	443	56576	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.190243959 CEST	56576	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.190465927 CEST	56576	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.190478086 CEST	443	56576	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.576517105 CEST	443	56572	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.577177048 CEST	56572	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.577193975 CEST	443	56572	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.577928066 CEST	56572	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.577934027 CEST	443	56572	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.677748919 CEST	443	56572	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.677822113 CEST	443	56572	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.678018093 CEST	56572	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.678046942 CEST	56572	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.678064108 CEST	443	56572	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.678077936 CEST	56572	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.678085089 CEST	443	56572	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.681128025 CEST	56577	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.681221962 CEST	443	56577	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.681307077 CEST	56577	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.681507111 CEST	56577	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.681545019 CEST	443	56577	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.685853004 CEST	443	56575	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.686311960 CEST	56575	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.686326981 CEST	443	56575	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.686867952 CEST	56575	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.686873913 CEST	443	56575	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.763339043 CEST	443	56573	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.763896942 CEST	56573	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.763916969 CEST	443	56573	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.764487982 CEST	56573	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.764492035 CEST	443	56573	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.785918951 CEST	443	56575	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.786031961 CEST	443	56575	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.786078930 CEST	56575	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.786106110 CEST	443	56575	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.786139011 CEST	443	56575	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.786196947 CEST	56575	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.786283016 CEST	56575	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.786298990 CEST	443	56575	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.786314011 CEST	56575	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.786320925 CEST	443	56575	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.789554119 CEST	56578	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.789587975 CEST	443	56578	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.789655924 CEST	56578	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.789843082 CEST	56578	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.789858103 CEST	443	56578	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.818469048 CEST	443	56574	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.819009066 CEST	56574	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.819029093 CEST	443	56574	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.819758892 CEST	56574	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.819765091 CEST	443	56574	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.840785027 CEST	443	56576	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.842968941 CEST	56576	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.842997074 CEST	443	56576	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.843467951 CEST	56576	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.843473911 CEST	443	56576	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.864514112 CEST	443	56573	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.864722013 CEST	443	56573	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.864774942 CEST	56573	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.864835978 CEST	56573	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.864850044 CEST	443	56573	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.864861012 CEST	56573	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.864865065 CEST	443	56573	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.867997885 CEST	56579	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.868031979 CEST	443	56579	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.868304014 CEST	56579	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.868463039 CEST	56579	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.868472099 CEST	443	56579	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.926409960 CEST	443	56574	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.926498890 CEST	443	56574	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.926565886 CEST	56574	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.926820040 CEST	56574	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.926836967 CEST	443	56574	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.926847935 CEST	56574	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.926853895 CEST	443	56574	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.929980993 CEST	56580	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.930002928 CEST	443	56580	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.930306911 CEST	56580	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.930500984 CEST	56580	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.930511951 CEST	443	56580	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.942529917 CEST	443	56576	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.942698956 CEST	443	56576	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.942862034 CEST	56576	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.943203926 CEST	56576	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.943226099 CEST	443	56576	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.943243980 CEST	56576	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.943252087 CEST	443	56576	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.946573019 CEST	56581	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.946633101 CEST	443	56581	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:53.946702003 CEST	56581	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.946918964 CEST	56581	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:53.946938992 CEST	443	56581	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:54.332465887 CEST	443	56577	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:54.333192110 CEST	56577	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:54.333277941 CEST	443	56577	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:54.333965063 CEST	56577	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:54.333980083 CEST	443	56577	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:54.434676886 CEST	443	56577	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:54.434839010 CEST	443	56577	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:54.434906006 CEST	56577	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:54.435245037 CEST	56577	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:54.435285091 CEST	443	56577	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:54.435312986 CEST	56577	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:54.435329914 CEST	443	56577	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:54.439363956 CEST	56582	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:54.439412117 CEST	443	56582	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:54.439527988 CEST	56582	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:54.439656973 CEST	56582	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:54.439683914 CEST	443	56582	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:54.446111917 CEST	443	56578	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:54.446504116 CEST	56578	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:54.446511984 CEST	443	56578	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:54.447124004 CEST	56578	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:54.447128057 CEST	443	56578	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:54.546139002 CEST	443	56578	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:54.546360970 CEST	443	56578	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:54.546504974 CEST	56578	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:54.546699047 CEST	56578	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:54.546699047 CEST	56578	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:54.546725035 CEST	443	56578	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:54.546736956 CEST	443	56578	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:54.549949884 CEST	56583	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:54.549997091 CEST	443	56583	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:54.550220966 CEST	56583	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:54.550390005 CEST	56583	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:54.550396919 CEST	443	56583	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:54.592720985 CEST	443	56580	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:54.593262911 CEST	56580	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:54.593272924 CEST	443	56580	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:54.593897104 CEST	56580	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:54.593900919 CEST	443	56580	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:54.628771067 CEST	443	56581	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:54.630024910 CEST	56581	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:54.630024910 CEST	56581	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:54.630050898 CEST	443	56581	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:54.630072117 CEST	443	56581	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:54.694207907 CEST	443	56580	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:54.694344997 CEST	443	56580	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:54.694418907 CEST	56580	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:54.694582939 CEST	56580	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:54.694617987 CEST	443	56580	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:54.694650888 CEST	56580	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:54.694665909 CEST	443	56580	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:54.698185921 CEST	56584	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:54.698237896 CEST	443	56584	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:54.698312044 CEST	56584	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:54.698555946 CEST	56584	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:54.698565960 CEST	443	56584	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:54.736267090 CEST	443	56581	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:54.736341000 CEST	443	56581	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:54.736460924 CEST	56581	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:54.736463070 CEST	443	56581	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:54.736522913 CEST	56581	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:54.736665964 CEST	56581	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:54.736665964 CEST	56581	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:54.736687899 CEST	443	56581	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:54.736700058 CEST	443	56581	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:54.739440918 CEST	56585	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:54.739475965 CEST	443	56585	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:54.739634037 CEST	56585	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:54.739758968 CEST	56585	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:54.739773035 CEST	443	56585	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:55.116599083 CEST	443	56582	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:55.117258072 CEST	56582	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:55.117316008 CEST	443	56582	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:55.117786884 CEST	56582	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:55.117798090 CEST	443	56582	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:55.209420919 CEST	443	56583	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:55.211222887 CEST	56583	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:55.211241007 CEST	443	56583	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:55.212281942 CEST	56583	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:55.212289095 CEST	443	56583	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:55.222055912 CEST	443	56582	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:55.222486019 CEST	443	56582	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:55.222583055 CEST	56582	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:55.222719908 CEST	56582	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:55.222740889 CEST	443	56582	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:55.222798109 CEST	56582	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:55.222805977 CEST	443	56582	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:55.259041071 CEST	56586	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:55.259092093 CEST	443	56586	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:55.259162903 CEST	56586	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:55.259608984 CEST	56586	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:55.259624958 CEST	443	56586	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:55.523274899 CEST	443	56583	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:55.523453951 CEST	443	56583	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:55.523582935 CEST	56583	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:55.523967981 CEST	56583	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:55.523983002 CEST	443	56583	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:55.523993015 CEST	56583	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:55.523998976 CEST	443	56583	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:55.526456118 CEST	443	56584	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:55.527777910 CEST	56584	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:55.527811050 CEST	443	56584	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:55.528775930 CEST	56584	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:55.528791904 CEST	443	56584	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:55.530972958 CEST	56587	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:55.531017065 CEST	443	56587	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:55.531233072 CEST	56587	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:55.531589031 CEST	56587	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:55.531600952 CEST	443	56587	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:55.638223886 CEST	443	56584	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:55.638796091 CEST	443	56584	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:55.638865948 CEST	56584	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:55.639123917 CEST	56584	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:55.639148951 CEST	443	56584	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:55.645867109 CEST	56588	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:55.645953894 CEST	443	56588	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:55.646125078 CEST	56588	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:55.646421909 CEST	56588	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:55.646456957 CEST	443	56588	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:56.057550907 CEST	443	56585	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:56.058798075 CEST	56585	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:56.058809042 CEST	443	56585	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:56.059770107 CEST	56585	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:56.059773922 CEST	443	56585	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:56.158499002 CEST	443	56585	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:56.158679008 CEST	443	56585	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:56.158715963 CEST	443	56585	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:56.158757925 CEST	56585	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:56.158807039 CEST	56585	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:56.158864975 CEST	56585	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:56.158879995 CEST	443	56585	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:56.158890009 CEST	56585	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:56.158895016 CEST	443	56585	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:56.165249109 CEST	56589	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:56.165266037 CEST	443	56589	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:56.165400028 CEST	56589	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:56.165838957 CEST	56589	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:56.165846109 CEST	443	56589	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:56.194886923 CEST	443	56587	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:56.195291042 CEST	56587	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:56.195327044 CEST	443	56587	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:56.196063995 CEST	56587	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:56.196074009 CEST	443	56587	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:56.306066036 CEST	443	56587	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:56.306294918 CEST	443	56587	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:56.306358099 CEST	56587	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:56.306463957 CEST	56587	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:56.306485891 CEST	443	56587	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:56.306499004 CEST	56587	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:56.306505919 CEST	443	56587	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:56.309422970 CEST	56590	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:56.309470892 CEST	443	56590	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:56.309487104 CEST	443	56588	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:56.309691906 CEST	56590	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:56.309691906 CEST	56590	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:56.309722900 CEST	443	56590	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:56.309986115 CEST	56588	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:56.310045958 CEST	443	56588	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:56.310492039 CEST	56588	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:56.310507059 CEST	443	56588	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:57.452404022 CEST	443	56588	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:57.452476978 CEST	443	56588	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:57.452728033 CEST	56588	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:57.452905893 CEST	56588	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:57.452905893 CEST	56588	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:57.452949047 CEST	443	56588	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:57.452977896 CEST	443	56588	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:57.456815004 CEST	56591	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:57.456911087 CEST	443	56591	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:57.457006931 CEST	56591	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:57.457509995 CEST	56591	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:57.457547903 CEST	443	56591	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:57.688437939 CEST	443	56536	216.58.212.132	192.168.2.4
Oct 13, 2024 17:52:57.688496113 CEST	443	56536	216.58.212.132	192.168.2.4
Oct 13, 2024 17:52:57.688662052 CEST	56536	443	192.168.2.4	216.58.212.132
Oct 13, 2024 17:52:58.076546907 CEST	56536	443	192.168.2.4	216.58.212.132
Oct 13, 2024 17:52:58.076615095 CEST	443	56536	216.58.212.132	192.168.2.4
Oct 13, 2024 17:52:58.143657923 CEST	443	56579	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:58.144635916 CEST	56579	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:58.144659042 CEST	443	56579	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:58.145286083 CEST	56579	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:58.145293951 CEST	443	56579	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:58.146306992 CEST	443	56590	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:58.146900892 CEST	56590	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:58.146908045 CEST	443	56590	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:58.147867918 CEST	56590	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:58.147872925 CEST	443	56590	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:58.148844004 CEST	443	56589	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:58.149471998 CEST	56589	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:58.149478912 CEST	443	56589	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:58.150217056 CEST	56589	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:58.150219917 CEST	443	56589	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:58.244837046 CEST	443	56579	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:58.244882107 CEST	443	56579	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:58.244919062 CEST	443	56579	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:58.244961977 CEST	56579	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:58.245150089 CEST	56579	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:58.245161057 CEST	443	56579	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:58.245191097 CEST	56579	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:58.245197058 CEST	443	56579	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:58.249841928 CEST	443	56590	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:58.249910116 CEST	443	56590	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:58.249970913 CEST	56590	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:58.250860929 CEST	56590	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:58.250864983 CEST	443	56590	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:58.250909090 CEST	56590	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:58.250911951 CEST	443	56590	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:58.253235102 CEST	56592	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:58.253261089 CEST	443	56592	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:58.253468037 CEST	56592	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:58.253621101 CEST	443	56589	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:58.253854036 CEST	443	56589	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:58.253897905 CEST	443	56589	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:58.253900051 CEST	56589	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:58.253937960 CEST	56589	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:58.253967047 CEST	56592	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:58.253983021 CEST	443	56592	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:58.254038095 CEST	56589	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:58.254038095 CEST	56589	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:58.254044056 CEST	443	56589	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:58.254050970 CEST	443	56589	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:58.257951021 CEST	56593	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:58.257983923 CEST	443	56593	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:58.258169889 CEST	56593	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:58.258502960 CEST	56593	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:58.258516073 CEST	443	56593	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:58.260370970 CEST	56594	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:58.260380983 CEST	443	56594	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:58.260442019 CEST	56594	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:58.260773897 CEST	56594	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:58.260783911 CEST	443	56594	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:58.614995956 CEST	443	56591	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:58.615999937 CEST	56591	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:58.616063118 CEST	443	56591	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:58.616789103 CEST	56591	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:58.616842985 CEST	443	56591	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:58.719734907 CEST	443	56591	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:58.719841003 CEST	443	56591	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:58.719954014 CEST	56591	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:58.720252991 CEST	56591	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:58.720304966 CEST	443	56591	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:58.720340014 CEST	56591	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:58.720356941 CEST	443	56591	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:58.724700928 CEST	56595	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:58.724745989 CEST	443	56595	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:58.724821091 CEST	56595	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:58.725012064 CEST	56595	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:58.725029945 CEST	443	56595	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:58.911190987 CEST	443	56594	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:58.912082911 CEST	56594	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:58.912106037 CEST	443	56594	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:58.912183046 CEST	443	56593	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:58.913444042 CEST	56594	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:58.913449049 CEST	443	56594	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:58.914123058 CEST	56593	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:58.914134979 CEST	443	56593	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:58.914745092 CEST	56593	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:58.914750099 CEST	443	56593	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:58.927885056 CEST	443	56586	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:58.928334951 CEST	56586	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:58.928348064 CEST	443	56586	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:58.929028034 CEST	56586	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:58.929032087 CEST	443	56586	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:58.946578979 CEST	443	56592	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:58.947367907 CEST	56592	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:58.947386980 CEST	443	56592	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:58.948338985 CEST	56592	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:58.948343992 CEST	443	56592	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:59.012052059 CEST	443	56594	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:59.012124062 CEST	443	56593	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:59.012259007 CEST	443	56593	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:59.012314081 CEST	56593	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:59.012331963 CEST	443	56593	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:59.012373924 CEST	443	56593	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:59.012423992 CEST	56593	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:59.012768030 CEST	56593	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:59.012783051 CEST	443	56593	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:59.012794018 CEST	56593	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:59.012799025 CEST	443	56593	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:59.013129950 CEST	443	56594	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:59.013170958 CEST	56594	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:59.014501095 CEST	56594	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:59.014503956 CEST	443	56594	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:59.014528036 CEST	56594	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:59.014530897 CEST	443	56594	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:59.019443989 CEST	56596	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:59.019484043 CEST	443	56596	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:59.019736052 CEST	56596	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:59.019968987 CEST	56597	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:59.020035028 CEST	443	56597	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:59.020214081 CEST	56596	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:59.020231009 CEST	443	56596	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:59.020247936 CEST	56597	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:59.020328045 CEST	56597	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:59.020349979 CEST	443	56597	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:59.029819965 CEST	443	56586	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:59.030217886 CEST	443	56586	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:59.030261040 CEST	56586	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:59.030291080 CEST	56586	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:59.030297041 CEST	443	56586	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:59.030307055 CEST	56586	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:59.030311108 CEST	443	56586	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:59.032840967 CEST	56598	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:59.032870054 CEST	443	56598	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:59.032933950 CEST	56598	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:59.033075094 CEST	56598	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:59.033092976 CEST	443	56598	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:59.051558018 CEST	443	56592	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:59.051649094 CEST	443	56592	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:59.051804066 CEST	56592	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:59.051883936 CEST	56592	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:59.051884890 CEST	56592	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:59.051891088 CEST	443	56592	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:59.051898956 CEST	443	56592	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:59.054013968 CEST	56599	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:59.054024935 CEST	443	56599	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:59.054085970 CEST	56599	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:59.054227114 CEST	56599	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:59.054239035 CEST	443	56599	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:59.394877911 CEST	443	56595	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:59.395349026 CEST	56595	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:59.395363092 CEST	443	56595	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:59.395838976 CEST	56595	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:59.395842075 CEST	443	56595	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:59.497229099 CEST	443	56595	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:59.497294903 CEST	443	56595	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:59.497395992 CEST	56595	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:59.497771025 CEST	56595	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:59.497771025 CEST	56595	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:59.497785091 CEST	443	56595	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:59.497792006 CEST	443	56595	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:59.500804901 CEST	56600	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:59.500850916 CEST	443	56600	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:59.501084089 CEST	56600	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:59.501306057 CEST	56600	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:59.501316071 CEST	443	56600	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:59.697501898 CEST	443	56596	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:59.698059082 CEST	56596	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:59.698100090 CEST	443	56596	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:59.698268890 CEST	443	56597	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:59.698542118 CEST	56596	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:59.698549032 CEST	443	56596	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:59.698709965 CEST	56597	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:59.698734045 CEST	443	56597	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:59.699035883 CEST	56597	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:59.699042082 CEST	443	56597	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:59.713273048 CEST	443	56598	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:59.713721991 CEST	56598	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:59.713737965 CEST	443	56598	13.107.246.45	192.168.2.4
Oct 13, 2024 17:52:59.714116096 CEST	56598	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:52:59.714119911 CEST	443	56598	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.049917936 CEST	443	56596	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.049990892 CEST	443	56597	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.049992085 CEST	443	56596	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.050021887 CEST	443	56597	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.050061941 CEST	443	56597	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.050087929 CEST	56596	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.050151110 CEST	56597	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.050156116 CEST	443	56598	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.050209045 CEST	443	56598	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.050271988 CEST	56598	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.050340891 CEST	56596	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.050370932 CEST	443	56596	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.050385952 CEST	56596	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.050394058 CEST	443	56596	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.050463915 CEST	56597	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.050474882 CEST	443	56597	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.051924944 CEST	56598	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.051929951 CEST	443	56598	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.054905891 CEST	56601	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.054940939 CEST	443	56601	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.055404902 CEST	56601	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.055521011 CEST	56602	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.055527925 CEST	443	56602	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.055670023 CEST	56601	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.055680990 CEST	443	56601	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.055716991 CEST	56602	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.055789948 CEST	56602	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.055799007 CEST	443	56602	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.055951118 CEST	443	56599	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.056509018 CEST	56599	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.056531906 CEST	443	56599	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.057049990 CEST	56599	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.057076931 CEST	443	56599	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.057121038 CEST	56603	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.057146072 CEST	443	56603	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.057218075 CEST	56603	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.057360888 CEST	56603	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.057369947 CEST	443	56603	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.162236929 CEST	443	56599	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.162695885 CEST	443	56599	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.162782907 CEST	56599	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.162790060 CEST	443	56599	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.162859917 CEST	56599	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.162947893 CEST	56599	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.162959099 CEST	443	56599	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.167283058 CEST	56604	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.167293072 CEST	443	56604	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.167376041 CEST	56604	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.167685986 CEST	56604	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.167696953 CEST	443	56604	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.238337994 CEST	443	56600	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.238931894 CEST	56600	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.238946915 CEST	443	56600	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.239409924 CEST	56600	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.239413977 CEST	443	56600	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.340958118 CEST	443	56600	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.341779947 CEST	443	56600	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.341845989 CEST	56600	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.341965914 CEST	56600	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.341983080 CEST	443	56600	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.345415115 CEST	56605	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.345482111 CEST	443	56605	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.345561981 CEST	56605	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.345791101 CEST	56605	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.345808983 CEST	443	56605	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.705368996 CEST	443	56602	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.706060886 CEST	56602	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.706089973 CEST	443	56602	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.706444979 CEST	56602	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.706453085 CEST	443	56602	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.735764980 CEST	443	56601	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.736344099 CEST	56601	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.736397028 CEST	443	56601	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.736733913 CEST	56601	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.736747980 CEST	443	56601	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.749548912 CEST	443	56603	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.749927998 CEST	56603	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.749943018 CEST	443	56603	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.750252962 CEST	56603	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.750257015 CEST	443	56603	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.806152105 CEST	443	56602	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.806632042 CEST	443	56602	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.806752920 CEST	56602	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.806830883 CEST	56602	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.806830883 CEST	56602	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.806852102 CEST	443	56602	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.806864977 CEST	443	56602	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.810156107 CEST	56606	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.810252905 CEST	443	56606	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.810354948 CEST	56606	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.810493946 CEST	56606	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.810516119 CEST	443	56606	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.830547094 CEST	443	56604	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.830974102 CEST	56604	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.830980062 CEST	443	56604	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.831408024 CEST	56604	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.831413031 CEST	443	56604	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.839674950 CEST	443	56601	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.839745045 CEST	443	56601	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.839840889 CEST	443	56601	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.839869022 CEST	56601	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.839920998 CEST	56601	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.839921951 CEST	56601	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.839961052 CEST	56601	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.839986086 CEST	443	56601	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.842394114 CEST	56607	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.842417955 CEST	443	56607	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.842494011 CEST	56607	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.842672110 CEST	56607	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.842689037 CEST	443	56607	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.856420994 CEST	443	56603	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.856439114 CEST	443	56603	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.856468916 CEST	443	56603	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.856487989 CEST	56603	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.856530905 CEST	56603	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.856745958 CEST	56603	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.856755972 CEST	443	56603	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.856772900 CEST	56603	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.856776953 CEST	443	56603	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.859090090 CEST	56608	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.859098911 CEST	443	56608	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.859181881 CEST	56608	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.859371901 CEST	56608	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.859381914 CEST	443	56608	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.933916092 CEST	443	56604	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.934062958 CEST	443	56604	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.934175968 CEST	56604	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.934292078 CEST	56604	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.934299946 CEST	443	56604	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.934334993 CEST	56604	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.934340000 CEST	443	56604	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.936665058 CEST	56609	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.936711073 CEST	443	56609	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:00.936822891 CEST	56609	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.937036991 CEST	56609	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:00.937068939 CEST	443	56609	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:01.006458044 CEST	443	56605	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:01.006973982 CEST	56605	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:01.006997108 CEST	443	56605	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:01.007426023 CEST	56605	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:01.007437944 CEST	443	56605	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:01.109750032 CEST	443	56605	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:01.109778881 CEST	443	56605	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:01.109821081 CEST	443	56605	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:01.109848022 CEST	56605	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:01.109888077 CEST	56605	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:01.110133886 CEST	56605	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:01.110161066 CEST	443	56605	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:01.110184908 CEST	56605	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:01.110198975 CEST	443	56605	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:01.113037109 CEST	56610	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:01.113070011 CEST	443	56610	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:01.113415003 CEST	56610	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:01.113518000 CEST	56610	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:01.113538027 CEST	443	56610	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:01.459413052 CEST	443	56606	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:01.460110903 CEST	56606	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:01.460145950 CEST	443	56606	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:01.460839033 CEST	56606	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:01.460854053 CEST	443	56606	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:01.523545980 CEST	443	56608	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:01.524178982 CEST	56608	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:01.524194002 CEST	443	56608	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:01.524662971 CEST	56608	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:01.524667978 CEST	443	56608	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:01.525063992 CEST	443	56607	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:01.525470018 CEST	56607	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:01.525476933 CEST	443	56607	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:01.525823116 CEST	56607	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:01.525827885 CEST	443	56607	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:01.558748960 CEST	443	56606	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:01.559659004 CEST	443	56606	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:01.559743881 CEST	56606	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:01.559865952 CEST	56606	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:01.559865952 CEST	56606	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:01.559912920 CEST	443	56606	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:01.559926987 CEST	443	56606	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:01.562937021 CEST	56611	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:01.562971115 CEST	443	56611	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:01.563044071 CEST	56611	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:01.563242912 CEST	56611	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:01.563255072 CEST	443	56611	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:01.618525028 CEST	443	56609	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:01.619039059 CEST	56609	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:01.619066000 CEST	443	56609	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:01.619668007 CEST	56609	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:01.619678974 CEST	443	56609	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:01.623976946 CEST	443	56608	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:01.624691963 CEST	443	56608	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:01.624759912 CEST	56608	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:01.624809027 CEST	56608	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:01.624830008 CEST	443	56608	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:01.624841928 CEST	56608	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:01.624846935 CEST	443	56608	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:01.627573967 CEST	56612	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:01.627590895 CEST	443	56612	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:01.627681971 CEST	56612	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:01.628151894 CEST	56612	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:01.628161907 CEST	443	56612	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:01.629256010 CEST	443	56607	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:01.629533052 CEST	443	56607	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:01.629717112 CEST	56607	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:01.629791021 CEST	56607	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:01.629795074 CEST	443	56607	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:01.629811049 CEST	56607	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:01.629815102 CEST	443	56607	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:01.632639885 CEST	56613	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:01.632721901 CEST	443	56613	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:01.633105993 CEST	56613	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:01.633106947 CEST	56613	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:01.633177996 CEST	443	56613	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:01.723807096 CEST	443	56609	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:01.723867893 CEST	443	56609	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:01.723942995 CEST	56609	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:01.723968983 CEST	443	56609	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:01.724054098 CEST	56609	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:01.724124908 CEST	56609	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:01.724164963 CEST	443	56609	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:01.724191904 CEST	56609	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:01.724206924 CEST	443	56609	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:01.726635933 CEST	56614	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:01.726695061 CEST	443	56614	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:01.726846933 CEST	56614	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:01.727045059 CEST	56614	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:01.727066040 CEST	443	56614	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:01.789103031 CEST	443	56610	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:01.789628983 CEST	56610	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:01.789649010 CEST	443	56610	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:01.790492058 CEST	56610	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:01.790498972 CEST	443	56610	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:01.897461891 CEST	443	56610	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:01.897924900 CEST	443	56610	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:01.897998095 CEST	56610	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:01.898114920 CEST	56610	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:01.898137093 CEST	443	56610	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:01.898149967 CEST	56610	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:01.898159027 CEST	443	56610	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:01.901583910 CEST	56615	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:01.901609898 CEST	443	56615	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:01.901684046 CEST	56615	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:01.901923895 CEST	56615	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:01.901932001 CEST	443	56615	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:02.238864899 CEST	443	56611	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:02.239552021 CEST	56611	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:02.239559889 CEST	443	56611	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:02.240200996 CEST	56611	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:02.240205050 CEST	443	56611	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:02.295798063 CEST	443	56612	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:02.296200037 CEST	56612	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:02.296207905 CEST	443	56612	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:02.296802044 CEST	56612	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:02.296806097 CEST	443	56612	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:02.331029892 CEST	443	56613	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:02.331474066 CEST	56613	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:02.331530094 CEST	443	56613	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:02.332093000 CEST	56613	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:02.332107067 CEST	443	56613	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:02.344471931 CEST	443	56611	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:02.344537973 CEST	443	56611	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:02.344609022 CEST	56611	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:02.344626904 CEST	443	56611	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:02.344644070 CEST	443	56611	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:02.344700098 CEST	56611	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:02.344841957 CEST	56611	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:02.344851971 CEST	443	56611	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:02.344860077 CEST	56611	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:02.344866037 CEST	443	56611	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:02.348467112 CEST	56616	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:02.348525047 CEST	443	56616	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:02.348623037 CEST	56616	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:02.348876953 CEST	56616	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:02.348908901 CEST	443	56616	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:02.395977974 CEST	443	56612	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:02.396272898 CEST	443	56612	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:02.396353006 CEST	56612	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:02.396614075 CEST	56612	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:02.396626949 CEST	443	56612	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:02.396636963 CEST	56612	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:02.396641970 CEST	443	56612	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:02.400999069 CEST	56617	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:02.401053905 CEST	443	56617	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:02.401118040 CEST	56617	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:02.401249886 CEST	56617	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:02.401281118 CEST	443	56617	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:02.428251982 CEST	443	56614	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:02.428765059 CEST	56614	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:02.428812981 CEST	443	56614	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:02.429455996 CEST	56614	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:02.429469109 CEST	443	56614	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:02.435890913 CEST	443	56613	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:02.435990095 CEST	443	56613	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:02.436069965 CEST	56613	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:02.436180115 CEST	56613	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:02.436180115 CEST	56613	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:02.436213017 CEST	443	56613	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:02.436233997 CEST	443	56613	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:02.439943075 CEST	56618	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:02.439966917 CEST	443	56618	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:02.440026999 CEST	56618	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:02.440181017 CEST	56618	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:02.440191031 CEST	443	56618	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:02.532919884 CEST	443	56614	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:02.533190966 CEST	443	56614	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:02.533541918 CEST	56614	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:02.533668041 CEST	56614	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:02.533668041 CEST	56614	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:02.533699036 CEST	443	56614	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:02.533723116 CEST	443	56614	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:02.537786961 CEST	56619	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:02.537847042 CEST	443	56619	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:02.537925005 CEST	56619	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:02.538290977 CEST	56619	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:02.538322926 CEST	443	56619	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:02.550324917 CEST	443	56615	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:02.550928116 CEST	56615	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:02.550939083 CEST	443	56615	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:02.551457882 CEST	56615	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:02.551464081 CEST	443	56615	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:02.651197910 CEST	443	56615	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:02.651484013 CEST	443	56615	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:02.651519060 CEST	443	56615	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:02.651540995 CEST	56615	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:02.651673079 CEST	56615	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:02.651673079 CEST	56615	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:02.652144909 CEST	56615	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:02.652156115 CEST	443	56615	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:02.654246092 CEST	56620	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:02.654259920 CEST	443	56620	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:02.654369116 CEST	56620	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:02.657263041 CEST	56620	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:02.657275915 CEST	443	56620	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:02.997714996 CEST	443	56616	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:02.998550892 CEST	56616	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:02.998615026 CEST	443	56616	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:03.000426054 CEST	56616	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:03.000442028 CEST	443	56616	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:03.058582067 CEST	443	56617	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:03.059101105 CEST	56617	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:03.059160948 CEST	443	56617	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:03.060412884 CEST	56617	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:03.060427904 CEST	443	56617	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:03.315646887 CEST	443	56616	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:03.315799952 CEST	443	56616	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:03.316114902 CEST	56616	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:03.316116095 CEST	56616	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:03.316255093 CEST	56616	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:03.316299915 CEST	443	56616	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:03.317125082 CEST	443	56618	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:03.317996025 CEST	56618	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:03.318051100 CEST	443	56618	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:03.318347931 CEST	443	56617	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:03.318413973 CEST	443	56617	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:03.318515062 CEST	443	56617	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:03.318553925 CEST	56618	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:03.318568945 CEST	443	56618	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:03.318610907 CEST	56617	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:03.318744898 CEST	56617	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:03.318768978 CEST	443	56617	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:03.318814039 CEST	56617	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:03.318828106 CEST	443	56617	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:03.320924044 CEST	56621	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:03.320924044 CEST	56622	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:03.320966959 CEST	443	56621	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:03.320981979 CEST	443	56622	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:03.321084023 CEST	56621	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:03.321084023 CEST	56622	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:03.321223021 CEST	56622	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:03.321223021 CEST	56621	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:03.321234941 CEST	443	56622	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:03.321247101 CEST	443	56621	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:03.326924086 CEST	443	56619	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:03.327557087 CEST	56619	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:03.327557087 CEST	56619	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:03.327578068 CEST	443	56619	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:03.327600956 CEST	443	56619	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:03.429286957 CEST	443	56619	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:03.429430962 CEST	443	56619	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:03.429682016 CEST	56619	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:03.429682016 CEST	56619	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:03.429682016 CEST	56619	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:03.430012941 CEST	443	56618	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:03.430072069 CEST	443	56618	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:03.430176973 CEST	56618	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:03.430248022 CEST	56618	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:03.430248976 CEST	56618	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:03.430279016 CEST	443	56618	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:03.430300951 CEST	443	56618	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:03.432236910 CEST	56624	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:03.432343960 CEST	443	56624	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:03.432399035 CEST	56623	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:03.432415009 CEST	443	56623	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:03.432549000 CEST	56624	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:03.432614088 CEST	56623	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:03.432693958 CEST	56624	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:03.432724953 CEST	443	56624	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:03.432724953 CEST	56623	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:03.432735920 CEST	443	56623	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:03.521070004 CEST	443	56620	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:03.522131920 CEST	56620	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:03.522131920 CEST	56620	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:03.522141933 CEST	443	56620	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:03.522152901 CEST	443	56620	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:03.623977900 CEST	443	56620	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:03.624253988 CEST	443	56620	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:03.624375105 CEST	56620	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:03.624413013 CEST	56620	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:03.624413013 CEST	56620	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:03.624423027 CEST	443	56620	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:03.624429941 CEST	443	56620	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:03.627485991 CEST	56625	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:03.627526045 CEST	443	56625	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:03.627705097 CEST	56625	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:03.627846003 CEST	56625	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:03.627866030 CEST	443	56625	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:03.647448063 CEST	56619	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:03.647516966 CEST	443	56619	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:04.306987047 CEST	443	56621	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:04.307488918 CEST	56621	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:04.307503939 CEST	443	56621	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:04.308099985 CEST	56621	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:04.308104992 CEST	443	56621	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:04.309561968 CEST	443	56624	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:04.309745073 CEST	443	56623	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:04.310039043 CEST	56624	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:04.310091972 CEST	443	56624	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:04.310156107 CEST	56623	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:04.310168982 CEST	443	56623	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:04.310758114 CEST	56624	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:04.310770988 CEST	443	56624	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:04.310852051 CEST	56623	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:04.310858011 CEST	443	56623	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:04.311220884 CEST	443	56622	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:04.311563969 CEST	56622	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:04.311569929 CEST	443	56622	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:04.312005043 CEST	56622	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:04.312009096 CEST	443	56622	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:04.421976089 CEST	443	56621	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:04.422254086 CEST	443	56621	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:04.422316074 CEST	56621	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:04.422395945 CEST	56621	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:04.422415018 CEST	443	56621	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:04.422434092 CEST	56621	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:04.422440052 CEST	443	56621	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:04.422621012 CEST	443	56622	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:04.422694921 CEST	443	56624	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:04.422753096 CEST	443	56622	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:04.422801018 CEST	56622	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:04.423077106 CEST	443	56624	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:04.423360109 CEST	56624	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:04.423976898 CEST	56622	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:04.423989058 CEST	443	56622	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:04.424012899 CEST	56622	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:04.424019098 CEST	443	56622	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:04.424248934 CEST	56624	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:04.424284935 CEST	443	56624	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:04.424305916 CEST	56624	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:04.424314022 CEST	443	56624	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:04.426804066 CEST	443	56623	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:04.426959038 CEST	443	56623	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:04.427016973 CEST	56623	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:04.427464008 CEST	56626	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:04.427499056 CEST	443	56626	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:04.427644014 CEST	56623	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:04.427644968 CEST	56623	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:04.427660942 CEST	443	56623	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:04.427666903 CEST	56626	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:04.427674055 CEST	443	56623	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:04.428010941 CEST	56627	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:04.428056002 CEST	443	56627	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:04.428114891 CEST	56627	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:04.429825068 CEST	56628	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:04.429935932 CEST	443	56628	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:04.429945946 CEST	56629	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:04.429971933 CEST	56627	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:04.429974079 CEST	56626	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:04.429980993 CEST	443	56629	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:04.429986000 CEST	443	56626	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:04.429994106 CEST	443	56627	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:04.430002928 CEST	56628	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:04.430017948 CEST	56629	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:04.430217028 CEST	56628	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:04.430246115 CEST	443	56628	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:04.430354118 CEST	56629	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:04.430368900 CEST	443	56629	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:04.517024994 CEST	443	56625	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:04.517456055 CEST	56625	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:04.517472029 CEST	443	56625	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:04.517946959 CEST	56625	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:04.517954111 CEST	443	56625	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:04.618115902 CEST	443	56625	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:04.618191957 CEST	443	56625	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:04.618285894 CEST	56625	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:04.618302107 CEST	443	56625	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:04.618324041 CEST	443	56625	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:04.618511915 CEST	56625	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:04.618556023 CEST	56625	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:04.618556023 CEST	56625	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:04.618572950 CEST	443	56625	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:04.618578911 CEST	443	56625	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:04.621292114 CEST	56630	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:04.621329069 CEST	443	56630	13.107.246.45	192.168.2.4
Oct 13, 2024 17:53:04.621464968 CEST	56630	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:04.621656895 CEST	56630	443	192.168.2.4	13.107.246.45
Oct 13, 2024 17:53:04.621673107 CEST	443	56630	13.107.246.45	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 13, 2024 17:51:43.229959011 CEST	53	52895	1.1.1.1	192.168.2.4
Oct 13, 2024 17:51:43.239862919 CEST	53	61024	1.1.1.1	192.168.2.4
Oct 13, 2024 17:51:44.261189938 CEST	53	55568	1.1.1.1	192.168.2.4
Oct 13, 2024 17:51:44.448802948 CEST	62584	53	192.168.2.4	1.1.1.1
Oct 13, 2024 17:51:44.451080084 CEST	49821	53	192.168.2.4	1.1.1.1
Oct 13, 2024 17:51:44.669847012 CEST	53	62584	1.1.1.1	192.168.2.4
Oct 13, 2024 17:51:44.673671961 CEST	53	49821	1.1.1.1	192.168.2.4
Oct 13, 2024 17:51:45.231287956 CEST	53	55478	1.1.1.1	192.168.2.4
Oct 13, 2024 17:51:46.034178019 CEST	58364	53	192.168.2.4	1.1.1.1
Oct 13, 2024 17:51:46.034364939 CEST	62650	53	192.168.2.4	1.1.1.1
Oct 13, 2024 17:51:46.264416933 CEST	53	62650	1.1.1.1	192.168.2.4
Oct 13, 2024 17:51:46.264467001 CEST	53	58364	1.1.1.1	192.168.2.4
Oct 13, 2024 17:51:46.473881960 CEST	53	52090	1.1.1.1	192.168.2.4
Oct 13, 2024 17:51:46.486684084 CEST	53	63653	1.1.1.1	192.168.2.4
Oct 13, 2024 17:51:46.898013115 CEST	65534	53	192.168.2.4	1.1.1.1
Oct 13, 2024 17:51:46.898149967 CEST	65069	53	192.168.2.4	1.1.1.1
Oct 13, 2024 17:51:46.905455112 CEST	53	65534	1.1.1.1	192.168.2.4
Oct 13, 2024 17:51:46.905505896 CEST	53	65069	1.1.1.1	192.168.2.4
Oct 13, 2024 17:51:58.846499920 CEST	138	138	192.168.2.4	192.168.2.255
Oct 13, 2024 17:52:01.195621014 CEST	53	59469	1.1.1.1	192.168.2.4
Oct 13, 2024 17:52:09.435453892 CEST	53	54479	162.159.36.2	192.168.2.4
Oct 13, 2024 17:52:09.957370043 CEST	55969	53	192.168.2.4	1.1.1.1
Oct 13, 2024 17:52:09.965359926 CEST	53	55969	1.1.1.1	192.168.2.4
Oct 13, 2024 17:52:46.961656094 CEST	51282	53	192.168.2.4	1.1.1.1
Oct 13, 2024 17:52:46.968868017 CEST	53	51282	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 13, 2024 17:51:44.448802948 CEST	192.168.2.4	1.1.1.1	0xbf23	Standard query (0)	mail.findmy-ld.help	A (IP address)	IN (0x0001)	false
Oct 13, 2024 17:51:44.451080084 CEST	192.168.2.4	1.1.1.1	0x8bb7	Standard query (0)	mail.findmy-ld.help	65	IN (0x0001)	false
Oct 13, 2024 17:51:46.034178019 CEST	192.168.2.4	1.1.1.1	0x7d76	Standard query (0)	mail.findmy-ld.help	A (IP address)	IN (0x0001)	false
Oct 13, 2024 17:51:46.034364939 CEST	192.168.2.4	1.1.1.1	0x52b9	Standard query (0)	mail.findmy-ld.help	65	IN (0x0001)	false
Oct 13, 2024 17:51:46.898013115 CEST	192.168.2.4	1.1.1.1	0xca0c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 13, 2024 17:51:46.898149967 CEST	192.168.2.4	1.1.1.1	0xd135	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 13, 2024 17:52:09.957370043 CEST	192.168.2.4	1.1.1.1	0x7f	Standard query (0)	15.164.165.52.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Oct 13, 2024 17:52:46.961656094 CEST	192.168.2.4	1.1.1.1	0x2510	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 13, 2024 17:51:44.669847012 CEST	1.1.1.1	192.168.2.4	0xbf23	No error (0)	mail.findmy-ld.help		50.6.138.164	A (IP address)	IN (0x0001)	false
Oct 13, 2024 17:51:46.264467001 CEST	1.1.1.1	192.168.2.4	0x7d76	No error (0)	mail.findmy-ld.help		50.6.138.164	A (IP address)	IN (0x0001)	false
Oct 13, 2024 17:51:46.905455112 CEST	1.1.1.1	192.168.2.4	0xca0c	No error (0)	www.google.com		142.250.185.196	A (IP address)	IN (0x0001)	false
Oct 13, 2024 17:51:46.905505896 CEST	1.1.1.1	192.168.2.4	0xd135	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 13, 2024 17:51:55.283807993 CEST	1.1.1.1	192.168.2.4	0x6034	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 17:51:55.283807993 CEST	1.1.1.1	192.168.2.4	0x6034	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 13, 2024 17:52:08.436731100 CEST	1.1.1.1	192.168.2.4	0xfabd	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 17:52:08.436731100 CEST	1.1.1.1	192.168.2.4	0xfabd	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 13, 2024 17:52:09.965359926 CEST	1.1.1.1	192.168.2.4	0x7f	Name error (3)	15.164.165.52.in-addr.arpa	none	none	PTR (Pointer record)	IN (0x0001)	false
Oct 13, 2024 17:52:36.873917103 CEST	1.1.1.1	192.168.2.4	0x37ed	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 17:52:36.873917103 CEST	1.1.1.1	192.168.2.4	0x37ed	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 13, 2024 17:52:46.968868017 CEST	1.1.1.1	192.168.2.4	0x2510	No error (0)	www.google.com		216.58.212.132	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

fs.microsoft.com

slscr.update.microsoft.com

otelrules.azureedge.net

mail.findmy-ld.help

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	50.6.138.164	80	2032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 17:51:44.681165934 CEST	465	OUT	GET /icloud-archivos/code2022esp.php HTTP/1.1 Host: mail.findmy-ld.help Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 17:51:45.184669971 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:51:45 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2876 Keep-Alive: timeout=5, max=75 Content-Type: text/html; charset=UTF-8 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 52 61 73 db 36 12 fd ee 5f 81 30 9d 8c d4 0b 49 cb 72 dc c4 16 d5 49 1c e7 ea 99 e4 d2 26 ce 75 6e 6e ae 19 08 58 89 48 40 80 01 40 c9 8a eb 9f d4 4f f9 09 f9 63 b7 00 29 8a b2 9d da bd f1 64 ae 73 47 7b 44 62 b1 fb f6 ed db 37 ba f3 f4 e5 e1 c9 3f 7e 3c 22 b9 2b 24 f9 f1 cd 93 e7 c7 87 24 8a d3 f4 e7 e1 61 9a 3e 3d 79 4a 7e 38 79 f1 9c ec 26 db 03 72 62 a8 b2 c2 09 ad a8 4c d3 a3 bf 45 24 ca 9d 2b f7 d3 74 b1 58 24 8b 61 a2 cd 2c 3d 79 95 7a a8 dd 54 6a 6d 21 e1 8e 47 e3 ad d1 9d 38 26 96 ce 81 93 a9 d1 05 a9 8c cc 7a db db 0f b6 fb 1e c0 36 08 82 49 5d f1 84 e9 22 56 36 a9 6c 4a df 0c ff 3e 48 0b 3d 11 12 52 a6 39 24 65 5e 92 38 46 40 df 63 3c ca 81 f2 f1 a8 00 47 89 07 8a e1 43 25 e6 59 74 a8 95 03 e5 e2 93 65 09 11 61 f5 29 8b 1c 9c ba 40 ee 80 b0 9c 1a 0b 2e 7b 73 f2 2c 7e 88 04 09 3e e1 a7 06 53 b4 80 2c 9a 0b 58 94 da b8 0e c4 42 70 97 67 1c e6 82 41 1c 0e f7 89 50 a8 09 95 b1 65 54 42 36 b8 4f 0a 7a 2a 8a aa 58 05 1a f8 91 14 ea 3d 31 20 b3 a8 34 30 05 c7 72 [TRUNCATED] Data Ascii: Ras6_0IrI&unnXH@@Oc)dsG{Db7?~<"+$$a>=yJ~8y&rbLE$+tX$a,=yzTjm!G8&z6I]"V6lJ>H=R9$e^8F@c<GC%Ytea)@.{s,~>S,XBpgAPeTB6Oz*X=1 40rbRG,J)6"7NB.))5:-BIZQ4Fwh_\Z b$;B!W<<ESGc !Ap<zI>3:.j(G\Va+>E\|ovIl><F(b\q2!})HFV9#9+c3(8fQ<HFM1=#LKm>9V3TH>7D$\R[\\|0Vw`H\Gx_!HP3y8grZSE5qzxX0Ob1A`cD(tKmM=5qKP::YS{Op)uOL+c&/.a}uaSfU}3TEW_G.bk_C&@\|3fGx;"T{"poogg
Oct 13, 2024 17:51:45.184731960 CEST	1236	IN	Data Raw: 2f 1e d4 db e9 ec 2e 22 82 d7 12 5d d0 6f b3 70 1b 0b 5b bf 8e a6 da 14 a4 00 97 6b ac 2d b5 75 c8 85 39 a1 55 16 a5 b8 9a 8a fb fe 49 99 97 35 fa 07 e3 cf af 80 0b ef 9e 67 58 1c 11 45 0b b8 fa c6 51 33 03 9c e6 6d ad 4f 60 dc f4 f5 bc 3d e0 0d Data Ascii: /."]op[k-u9UI5gXEQ3mO`=!l""5RX{~b+A,axl'M>S+GzA\EfxuHOHQJpR8ThKc-k>$>%,&K:EjfRPM8
Oct 13, 2024 17:51:45.184751034 CEST	666	IN	Data Raw: d3 53 cd 2a 9b 71 fc 2d d0 e4 c9 0c dc 91 04 ff f9 64 79 cc 7b 11 cb a9 d9 8e fa 09 5d a5 1e 4c 2b c5 9c 5f f0 9c 4a c1 a9 aa 8a 09 98 1e f4 cf 0c b8 ca 28 e2 00 f5 59 03 52 29 bf 87 e4 3d 2c 0f 51 82 7d 48 16 b9 60 f9 fd 87 59 16 f2 7e fd b5 57 Data Ascii: S*q-dy{]L+_J(YR)=,Q}H`Y~WRgnS^;&SCzJX0w$AppMnsMm7^p^m7\|i5J-3tc<[hu%/:=t%uHI.SMM~u~%W#3
Oct 13, 2024 17:51:45.209624052 CEST	381	OUT	GET /icloud-archivos/fonts.css HTTP/1.1 Host: mail.findmy-ld.help Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://mail.findmy-ld.help/icloud-archivos/code2022esp.php Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 17:51:45.328190088 CEST	765	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:51:45 GMT Server: Apache Last-Modified: Sat, 26 Nov 2022 14:31:26 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 478 Keep-Alive: timeout=5, max=74 Connection: Keep-Alive Content-Type: text/css Data Raw: 1f 8b 08 00 00 00 00 00 00 03 dd 92 4f 4e 83 40 14 87 d7 f6 14 2f 6c 68 1b 69 6b e3 9f b4 6e 34 ae 5c 98 98 f6 00 66 0a 0f 3b 71 60 c8 cc ab 4a 8c 57 70 ed 51 8c c7 f1 02 5e 41 a0 b4 d1 49 83 0e e9 c2 b2 9c 07 bf 07 bf 6f be b3 50 c6 e4 85 cc 47 78 6a ed 95 87 88 8b 74 ec 5e a5 8a b3 00 a6 48 70 ad a4 7b 5a 3e d6 94 0a 1c c7 52 45 4c ac 66 0f c8 6f e7 34 1e 0e 06 d9 44 2b 7f 2c a4 cf 44 db fd 78 7d ff 7c 7b 71 3b fb b0 50 a2 ed f4 fa 51 b1 d3 d3 48 5e a2 e4 0d cd 79 dc 7b 90 61 e8 74 20 cc 37 52 db 59 1e 2b 13 44 df 03 a4 16 48 69 82 4e 27 fb 78 bf 0b 17 32 c9 32 d9 ff 40 db ef c0 c1 68 34 84 f3 40 ce 10 a6 a9 26 8c 34 5c c6 be 54 89 54 8c 30 e8 c1 b9 10 30 c9 5f d7 30 41 8d ea 3e 1f 96 dd b9 06 06 a4 58 80 11 53 77 20 c3 ca 4d dd 7e eb b9 d5 3a ab 49 94 13 13 dc df 06 51 6f b9 ca 1e ec 2a d8 0c be 90 c1 73 4b 7a 15 32 a1 a4 5d 6b f6 17 73 0e ad cd c1 47 aa 67 ce b7 60 33 cc 31 f8 c6 79 1d 61 f0 3d b2 e5 1b 61 c0 17 91 1d da 32 d3 48 aa 1b ad ad 49 b5 96 b7 3f a3 cd 60 0c 19 40 b7 24 58 a9 14 4a da [TRUNCATED] Data Ascii: ON@/lhikn4\f;q`JWpQ^AIoPGxjt^Hp{Z>RELfo4D+,Dx}\|{q;PQH^y{at 7RY+DHiN'x22@h4@&4\TT00_0A>XSw M~:IQo*sKz2]ksGg`31ya=a2HI?`@$XJn?q~UIN5,'&-r]=p38C-)"JvEq~Y:ED91m<W!Jf9q~Q0pmn!X2Hkn'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49735	50.6.138.164	80	2032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 17:51:45.209971905 CEST	379	OUT	GET /icloud-archivos/app.css HTTP/1.1 Host: mail.findmy-ld.help Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://mail.findmy-ld.help/icloud-archivos/code2022esp.php Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 17:51:45.338641882 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:51:45 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Sat, 26 Nov 2022 14:31:26 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Keep-Alive: timeout=5, max=75 Transfer-Encoding: chunked Content-Type: text/css Data Raw: 31 66 61 61 0d 0a 1f 8b 08 00 00 00 00 00 00 03 cc b2 ed 8e e3 b8 96 2d f8 3b f2 29 d4 91 48 dc c8 be 41 97 e4 8f b0 ad 44 1d 54 df 3c 75 d0 3f e6 36 06 73 81 c1 0c 72 12 05 4a a4 24 b6 29 52 20 a9 b0 23 1a 79 9f 7d 36 29 c9 a6 2c c9 76 44 d6 39 dd 11 f9 61 73 af bd f6 da 7b ad c2 94 3c f8 8f 0f 77 99 14 06 65 b8 64 fc 25 0e 34 16 1a 69 aa 58 f6 e5 c3 1d 2a 35 32 f4 60 90 66 af 14 61 f2 ef b5 36 71 10 85 e1 27 5b dc d3 64 c7 cc 24 e0 c7 87 0f 89 24 2f 76 42 89 55 ce 44 1c 84 ee 15 2b c3 52 4e 1f 3f 60 cd 08 fc 47 a8 c1 8c eb c7 0f 19 cb 53 5c 19 26 85 fb 5c 2b 28 66 52 1a aa 1e 3f 14 14 13 f7 7f ae 64 5d 3d 7e 28 31 03 54 49 45 fd f8 41 e0 e7 c7 0f 9a a6 4d a7 ae 4b 98 e7 e6 12 a6 2b 8e 61 ab 84 cb 74 d7 0c af 09 93 8f 1f 52 2c 9e 31 8c ac 94 cc 15 d5 f0 e9 19 b4 c8 5e 13 13 9c 09 8a da de bb 67 6a 75 63 8e 30 67 39 2c 93 60 4d 2d e0 44 1b 0b 69 1e be a5 70 4e 25 b9 fe fe b9 c7 26 a4 85 de 15 94 e5 85 e9 4e f1 ad 60 84 50 f1 fd f1 83 a1 25 e0 0c 1d e9 b1 f4 f6 39 c1 e9 ce 6e 2f 08 4a 25 97 2a 0e 8c [TRUNCATED] Data Ascii: 1faa-;)HADT<u?6srJ$)R #y}6),vD9as{<wed%4iX52`fa6q'[d$$/vBUD+RN?`GS\&\+(fR?d]=~(1TIEAMK+atR,1^gjuc0g9,`M-DipN%&N`P%9n/J%0,pg{ X'f#i,LIc 1'V"y!8y08QEtBD`N/^ fOkZq3>f}?a%yNVu]+Z]%5EpkVFVq.mtbAX^+flVa>-q \$]B-3\2q,>>~9j7NjxDU2x)q?uk.UcZ<Lf!T-LyM{A\|/AhO3W0/4T6vJ2pHy1'{RHm7e25bBPRxWaB\h.YG]t;-h9X6cTmE]&T1r+&P/V6VZL{h1R)l5yr]&{M5I<f^G!3\|LC
Oct 13, 2024 17:51:45.338689089 CEST	224	IN	Data Raw: 0b 7b 94 58 e5 4c 80 05 c1 bc ea 7b 32 5b ac 68 09 ff 3d cd 9b ff d7 f0 9f a3 e6 34 a7 82 5c 09 91 bd 15 56 14 5b 98 7c a6 2a e3 72 ef 9d 5d 56 26 57 b2 ae 6c 39 83 f3 c1 2e 8d 31 89 b4 e7 b5 04 36 f4 a7 21 28 95 9c e3 4a 53 7b ee e6 d3 97 63 4d Data Ascii: {XL{2[h=4\V[\|r]V&Wl9.16!(JS{cMW8gg?d,Q)_SK'4>'ASBgb7pWnok/(,Q)HI$y9dd%gjX5(cX/bDp&(Z[rYUq~
Oct 13, 2024 17:51:45.338738918 CEST	1236	IN	Data Raw: 38 dd d9 2c 08 d2 29 fc 98 65 99 93 c6 44 55 9b c7 0f 49 6d 8c 14 8f 1f 34 e5 34 85 ef 7e b6 7a aa 99 28 40 8e e9 cb 39 3d f6 14 1d 9f 61 8e 63 3a 09 5b e3 c4 2a b5 63 10 a1 a9 54 d8 30 29 e2 40 48 41 1b 7c 5c d8 4c 3f c2 87 4c a6 b5 f6 db e7 8b Data Ascii: 8,)eDUIm44~z(@9=ac:[cT0)@HA\|\L?L\|TY-U>5P{^UF)Es,CIIZQ;g#ln[r!$P,!Q8RTWRh(ptrSX)m&qt0Se"0s0!.4v
Oct 13, 2024 17:51:45.338805914 CEST	1236	IN	Data Raw: e6 3e c4 0b b2 8f 59 f8 18 97 5e bf ba f4 ab 5e 64 7d cc ca c7 78 39 f5 31 4f 3e c6 85 d3 af ae 7b d5 f1 5d 36 3e e6 69 7c 97 ad 8f 59 9f ef d2 a4 ee 78 b1 f1 65 a2 de 59 b7 e3 db 44 fd c3 86 e7 fb 54 35 e7 a8 99 a6 58 5e 80 7d b8 36 72 04 13 f9 Data Ascii: >Y^^d}x91O>{]6>i\|YxeYDT5X^}6rn&t K2a\|:N[8ndduZi6<@"2u=[xn&Mkqatp[7b=I-?3`2MMwUj
Oct 13, 2024 17:51:45.338850021 CEST	1236	IN	Data Raw: 40 4b ce 48 60 14 16 ba c2 0a 24 40 7d 5f 30 43 11 7c 4f 5d cf 5e e1 0a 5e 2b 4c 08 13 39 58 09 6d d1 bc 3a 74 5b 69 f6 0a b8 68 e9 5e dc 1d 8a 76 cf 68 b6 9c 6f 56 eb e3 48 a4 30 61 b5 86 68 3a 2c dc 23 d9 31 83 6a 0d 25 4d 39 4d cd 51 23 2a e5 Data Ascii: @KH`$@}_0C\|O]^^+L9Xm:t[ih^vhoVH0ah:,#1j%M9MQ#*DANLk>3O>j6D\|;LD@vJx+]'RpNn#][uGE+BSpAezk&rL ]V~,>U<#LSh}
Oct 13, 2024 17:51:45.338896990 CEST	1236	IN	Data Raw: 94 6c 08 ee 27 08 38 31 c9 1d d3 b0 7d 48 9d 65 d9 a9 7f 8f 95 60 22 f7 7b 5d 7d b4 31 c4 64 39 a2 89 52 3c 5f 3c 0d 38 7b 31 68 df 9a eb dd 34 8d a6 db 75 94 0d a7 6d 37 ab 2c 24 c3 69 ce df 9f 62 26 ab cd 2a 9a 0f 99 7b c1 ec 16 39 3e ca 8a 8a Data Ascii: l'81}He`"{]}1d9R<_<8{1h4um7,$ib&*{9>JD@F9GM]J#oK1cg38_GLu5SVF8<?s,YG>vnxl~z=ZQN45Rw\t\bf[rbSA
Oct 13, 2024 17:51:45.338943958 CEST	1236	IN	Data Raw: 15 cd c3 f0 7c 00 cf df 1e a3 f3 9e ab 31 1a 6d b8 16 23 9e f7 63 34 4e 72 6b 8c c6 77 ff a9 c0 4c 50 fe 5c 34 2e 92 fe 44 08 8e 29 5b 3f ad 3b fe 82 11 42 05 3a e8 3e a3 90 b7 49 5d 3f 6d 46 52 bc dd 46 67 fc ba 7c 1f ff 76 3b 1f e1 8f a2 ed f6 Data Ascii: \|1m#c4NrkwLP\4.D)[?;B:>I]?mFRFg\|v;l@I7uKu5b_6=H=NR^}Qsss5h*BY-C&A@SwK8t+JKU_JsK,/J
Oct 13, 2024 17:51:45.339188099 CEST	1236	IN	Data Raw: 1f ee ff f5 ff fa 23 b7 a9 00 03 fe b0 6d b3 4a e4 f7 9f bf f4 f0 8d 92 54 3e 5b 8b 2e cd e5 cc d0 9e 0f 99 fb b9 a5 69 86 ab 8a 53 c4 08 e2 32 97 cd 8d de c9 74 dd d1 06 88 c7 f8 df e8 68 3b 72 ca d1 3e eb 4f 38 da ad f6 46 47 b9 a5 7f b3 a5 c1 Data Ascii: #mJT>[.iS2th;r>O8FG,1"a&rRP F\|N.37AT(/R_7DTsgyRP&q`gAxgRb3$LWvpihqjb0X
Oct 13, 2024 17:51:45.339236021 CEST	1236	IN	Data Raw: 4d 65 bc 49 66 99 a6 06 ba e6 67 73 4f 7a 63 9c 1a f6 ec 6b 8d 03 21 41 fc 19 bc 30 25 ff 46 98 fa f5 5e 19 7e ff 3d 98 31 c8 79 2c a4 79 98 09 89 32 ce aa cf ce d0 52 be fa 37 52 d2 60 43 1f a2 4d 48 68 fe b9 b1 f0 62 b9 d4 97 eb ed fe 97 30 17 Data Ascii: MeIfgsOzck!A0%F^~=1y,y2R7R`CMHhb0jchLCBPWv@ Pw]bG_2K!e?`\|u.5}=qS?z d<qgS>j/&A-4St-)3/q5\F/%gG'-21N
Oct 13, 2024 17:51:45.339283943 CEST	1236	IN	Data Raw: 6c 26 20 ac f6 e0 63 94 c1 4c b3 d3 37 64 98 e1 d4 32 66 f0 84 34 7b a5 71 b0 98 5b 3d ed 8c 38 88 96 d5 21 70 12 1b d0 fe 38 a6 a0 8a 99 0b 63 98 c8 e4 19 77 b4 e9 71 87 01 ae 8d 74 23 dc eb 01 01 91 29 e2 60 b9 1c 99 b8 0c c3 0b d3 e0 06 bb f3 Data Ascii: l& cL7d2f4{q[=8!p8cwqt#)`ioZ+-UTz0T*IHA=]k_cdj-U$6z9Ez/A>;a]f7R_Jyn5UJn\|]zsf5VIp%D>$Y6
Oct 13, 2024 17:51:45.344024897 CEST	1166	IN	Data Raw: 47 72 94 6a 1b 50 29 5f a7 ab 93 85 67 aa 0c 4b 31 47 98 b3 5c c4 41 c9 08 e1 76 a0 9d 8e 0a 6a 0d 8e 03 26 0a aa 98 f1 74 64 70 01 a4 4b 29 4d e1 48 b1 30 0c 28 b0 a6 04 50 9d a3 0b f7 03 0f 0d 9c bd c2 42 d1 c6 2d e8 5e f6 2d ff 32 0c ad 48 9c Data Ascii: GrjP)_gK1G\Avj&tdpK)MH0(PB-^-2Hr%kA(,t_`"tzB'=V063a^a0Zj6\l.F<2ifj/NHjH8QTZr}0ikc`5w;NvVPI&U_GjH?h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49738	50.6.138.164	80	2032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 17:51:45.214077950 CEST	381	OUT	GET /icloud-archivos/style.css HTTP/1.1 Host: mail.findmy-ld.help Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://mail.findmy-ld.help/icloud-archivos/code2022esp.php Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 17:51:45.718667984 CEST	599	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:51:45 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Sat, 26 Nov 2022 14:31:26 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 286 Keep-Alive: timeout=5, max=75 Content-Type: text/css Data Raw: 1f 8b 08 00 00 00 00 00 00 03 55 50 dd 6a c3 20 14 be f7 29 84 31 58 21 06 6d 92 76 d5 ab 5e 74 ef 61 a2 4d 0e b3 2a c6 92 ac 63 ef be 93 8c 6c 0c 11 3c e7 7c 3f e7 b3 b4 29 85 e4 42 0f 9e 7e 92 56 77 ef 7d 0a 77 6f 58 17 5c 48 92 3e bd 9d 2f a7 73 a5 48 0c 23 64 08 5e 52 dd 8e c1 dd b3 55 64 02 93 07 79 e4 cf 8a dc 74 42 09 e6 ec 35 4b ca aa 23 b6 da 90 8c 4d 2c 69 03 f7 51 d2 26 ce 8a fc cc 9b 3d 8e a3 36 06 7c 2f a9 b0 b7 0d 8c 45 9c 29 ca 83 a1 a9 6f f5 8b 78 6d 0a 51 9f 0a 51 f0 b2 3e ee 16 dc cc c6 41 9b 30 49 ca 11 8b aa 54 2c 8f 3d de 95 c2 8b f5 94 62 f7 bb 55 0e 51 d2 d3 e2 ff 67 ba ae b3 85 6c 78 75 a9 b8 22 d7 e0 33 9b 2c f4 03 6e 59 73 ec 64 3b 67 a6 1d f4 18 bc b3 3e db a4 c8 83 81 37 76 46 91 8d 32 c2 c3 6e 9a ce 66 44 b1 31 ea 6e 75 62 bc e4 e2 b0 64 fc a7 de f0 8d 7c d5 37 70 1f f8 af 09 b4 53 e4 8b 7e 03 1b d6 07 a2 94 01 00 00 Data Ascii: UPj )1X!mv^taM*cl<\|?)B~Vw}woX\H>/sH#d^RUdytB5K#M,iQ&=6\|/E)oxmQQ>A0IT,=bUQglxu"3,nYsd;g>7vF2nfD1nubd\|7pS~
Oct 13, 2024 17:51:46.017060995 CEST	411	OUT	GET /icloud-archivos/myriad-set-pro_text.woff HTTP/1.1 Host: mail.findmy-ld.help Connection: keep-alive Origin: http://mail.findmy-ld.help User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://mail.findmy-ld.help/icloud-archivos/fonts.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 17:51:46.139991999 CEST	1236	IN	HTTP/1.1 404 Not Found Date: Sun, 13 Oct 2024 15:51:46 GMT Server: Apache Last-Modified: Wed, 24 May 2023 01:50:54 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 4677 Keep-Alive: timeout=5, max=74 Connection: Keep-Alive Content-Type: text/html Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 52 6d 73 d3 c8 96 fe 0c bf e2 8c 73 67 80 aa d8 4a 26 61 76 b0 15 df 82 90 0c b9 05 24 9b 84 e5 4e 6d ed 52 6d e9 48 ea 49 ab 8f e8 6e d9 d6 4d cd fe f6 3d dd 92 5f 63 b8 70 77 0d b1 a5 7e 79 ce f3 16 ff f0 fa f2 f4 f6 f7 ab 33 28 5c a9 e0 ea c3 ab b7 17 a7 d0 eb 47 d1 c7 a3 d3 28 7a 7d fb 1a fe fe e6 f6 dd 5b 38 1c 1c c0 8d 33 32 71 51 74 f6 be 07 bd c2 b9 6a 18 45 b3 d9 6c 30 3b 1a 90 c9 a3 db eb 68 ee 51 0e fd b5 ee b1 6f c3 9d 41 ea d2 de f8 71 1c 86 cc 4b a5 ed c9 0e 80 c3 17 2f 5e b4 f7 7a fe d0 50 09 9d 9f f4 50 f7 60 f9 e4 31 50 a4 50 19 ca a4 c2 25 4a 5e 56 79 c0 98 67 3a 3a 3c e4 73 d0 7d e2 12 9d 00 7f ac 8f 9f 6b 39 3d e9 9d 92 76 a8 5d ff b6 a9 b0 07 49 fb 76 d2 73 38 77 91 1f 3e 82 a4 10 c6 a2 3b a9 5d d6 ff b5 07 d1 1a 9a 93 4e e1 f8 f8 e0 18 fa 70 f5 f2 b7 33 78 7f 79 0b e7 97 1f de bf 8e a3 76 ef f1 e3 47 fc 89 7f e8 f7 e1 65 9a c2 8d 92 29 c2 65 ed 2c f4 fb e3 76 cf 26 46 56 0e ac 49 96 02 12 4a 71 f0 c7 e7 1a 4d 33 48 a8 8c da c7 fe d1 e0 68 70 38 [TRUNCATED] Data Ascii: RmssgJ&av$NmRmHInM=_cpw~y3(\G(z}[832qQtjEl0;hQoAqK/^zPP`1PP%J^Vyg::<s}k9=v]Ivs8w>;]Np3xyvGe)e,v&FVIJqM3Hhp8(a{8jotEI.6q^>YZQH]rBis_4:Jar!c(j):{{d!5Dh4+k5yUD$wZ}YQO,5I>i6<]2XpCMe^Wh2.\|~l'\|v,sTWdG'8RFOE>8.V?\~[KJzp=4LB)YyuFMYb;Cd5[&TWRd{/_lyoY'+G;G\?zJL9*~"P,EO$}(OW<2X!SSQrxOx"#DJMAP!3-uH26?<gR;1<]9G$Vp0sBQ=f%afQmB<qMZq0&Vk
Oct 13, 2024 17:51:46.140049934 CEST	1236	IN	Data Raw: 49 26 3b f9 fa 41 83 05 ea 7d 2a 6d a5 44 33 d4 a4 71 b1 99 49 63 79 2b 21 45 66 c8 7d ce 7e f9 e5 e0 60 b1 69 91 ef a6 ab dd a3 c9 f3 17 2f 7e 5d ec ba 42 9a b5 cd c3 17 bf 26 87 2f 56 43 53 84 7b 98 88 e4 2e 37 54 eb b4 bf 38 87 cf fd bf 11 0b Data Ascii: I&;A}mD3qIcy+!Ef}~`i/~]B&/VCS{.7T81),)VRCx{k_hT!dnD3bxixqTHr2=-c/7UtoGc-'9_e$'(e66FANz=86CG]__^g
Oct 13, 2024 17:51:46.140099049 CEST	1236	IN	Data Raw: 7f 5f 9a cc 0f 7c 7e cc 8d 47 d3 16 aa a5 c0 11 77 9c 06 70 2d f3 c2 71 9d 65 72 e7 67 b7 4d f9 97 a6 78 33 93 82 c8 22 5c 19 aa d0 38 89 76 00 b7 8c 58 2d df 59 8d 52 e0 90 bf bc 76 3f ae 12 5e 1f 5f 0e 51 fa 28 da aa 25 42 fb 6a 70 ac 19 d5 3a Data Ascii: _\|~Gwp-qergMx3"\8vX-YRv?^_Q(%Bjp:}P[_0uBTg0+\|~@('H{3jsrTMsMDk={j-o\|m4aG+.<W6CYkGm^jTRm=9tMj=;
Oct 13, 2024 17:51:46.141360998 CEST	1236	IN	Data Raw: 14 ae c5 80 4c 2a 8c 23 31 8e 23 06 59 f2 f0 d3 3a 38 d6 e1 50 bb de 46 46 b7 2c 79 13 c3 eb 75 2c de 42 97 c2 94 0d 7e ca ef ce d4 fc 46 da 3e 63 a3 84 03 87 6c 70 70 13 cd 94 f3 29 5a 76 13 0c 5e b2 55 09 1a 0f 04 36 41 2d 8c a4 36 a7 16 95 33 Data Ascii: L#1#Y:8PFF,yu,B~F>clpp)Zv^U6A-63YZ2Zsc]1Z [SiXCY^WQCbK~+n:)@UP7RpWO~b!/r@l-ElQK$gYzKoF
Oct 13, 2024 17:51:46.141407967 CEST	29	IN	Data Raw: b7 fe ec 9e d9 f5 30 98 c9 c5 d1 84 d2 26 3c 14 ae 64 4b ff 17 cc cb 70 7c 28 2e 00 00 Data Ascii: 0&<dKp\|(.
Oct 13, 2024 17:51:46.144661903 CEST	410	OUT	GET /icloud-archivos/myriad-set-pro_text.ttf HTTP/1.1 Host: mail.findmy-ld.help Connection: keep-alive Origin: http://mail.findmy-ld.help User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://mail.findmy-ld.help/icloud-archivos/fonts.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 17:51:46.268821955 CEST	1236	IN	HTTP/1.1 404 Not Found Date: Sun, 13 Oct 2024 15:51:46 GMT Server: Apache Last-Modified: Wed, 24 May 2023 01:50:54 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 4677 Keep-Alive: timeout=5, max=73 Connection: Keep-Alive Content-Type: text/html Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 52 6d 73 d3 c8 96 fe 0c bf e2 8c 73 67 80 aa d8 4a 26 61 76 b0 15 df 82 90 0c b9 05 24 9b 84 e5 4e 6d ed 52 6d e9 48 ea 49 ab 8f e8 6e d9 d6 4d cd fe f6 3d dd 92 5f 63 b8 70 77 0d b1 a5 7e 79 ce f3 16 ff f0 fa f2 f4 f6 f7 ab 33 28 5c a9 e0 ea c3 ab b7 17 a7 d0 eb 47 d1 c7 a3 d3 28 7a 7d fb 1a fe fe e6 f6 dd 5b 38 1c 1c c0 8d 33 32 71 51 74 f6 be 07 bd c2 b9 6a 18 45 b3 d9 6c 30 3b 1a 90 c9 a3 db eb 68 ee 51 0e fd b5 ee b1 6f c3 9d 41 ea d2 de f8 71 1c 86 cc 4b a5 ed c9 0e 80 c3 17 2f 5e b4 f7 7a fe d0 50 09 9d 9f f4 50 f7 60 f9 e4 31 50 a4 50 19 ca a4 c2 25 4a 5e 56 79 c0 98 67 3a 3a 3c e4 73 d0 7d e2 12 9d 00 7f ac 8f 9f 6b 39 3d e9 9d 92 76 a8 5d ff b6 a9 b0 07 49 fb 76 d2 73 38 77 91 1f 3e 82 a4 10 c6 a2 3b a9 5d d6 ff b5 07 d1 1a 9a 93 4e e1 f8 f8 e0 18 fa 70 f5 f2 b7 33 78 7f 79 0b e7 97 1f de bf 8e a3 76 ef f1 e3 47 fc 89 7f e8 f7 e1 65 9a c2 8d 92 29 c2 65 ed 2c f4 fb e3 76 cf 26 46 56 0e ac 49 96 02 12 4a 71 f0 c7 e7 1a 4d 33 48 a8 8c da c7 fe d1 e0 68 70 38 [TRUNCATED] Data Ascii: RmssgJ&av$NmRmHInM=_cpw~y3(\G(z}[832qQtjEl0;hQoAqK/^zPP`1PP%J^Vyg::<s}k9=v]Ivs8w>;]Np3xyvGe)e,v&FVIJqM3Hhp8(a{8jotEI.6q^>YZQH]rBis_4:Jar!c(j):{{d!5Dh4+k5yUD$wZ}YQO,5I>i6<]2XpCMe^Wh2.\|~l'\|v,sTWdG'8RFOE>8.V?\~[KJzp=4LB)YyuFMYb;Cd5[&TWRd{/_lyoY'+G;G\?zJL9*~"P,EO$}(OW<2X!SSQrxOx"#DJMAP!3-uH26?<gR;1<]9G$Vp0sBQ=f%afQmB<qMZq0&Vk
Oct 13, 2024 17:51:46.268892050 CEST	224	IN	Data Raw: 49 26 3b f9 fa 41 83 05 ea 7d 2a 6d a5 44 33 d4 a4 71 b1 99 49 63 79 2b 21 45 66 c8 7d ce 7e f9 e5 e0 60 b1 69 91 ef a6 ab dd a3 c9 f3 17 2f 7e 5d ec ba 42 9a b5 cd c3 17 bf 26 87 2f 56 43 53 84 7b 98 88 e4 2e 37 54 eb b4 bf 38 87 cf fd bf 11 0b Data Ascii: I&;A}mD3qIcy+!Ef}~`i/~]B&/VCS{.7T81),)VRCx{k_hT!dnD3bxixqTHr2=-c/7UtoGc-'9_e$'(e66FANz=8
Oct 13, 2024 17:51:46.268935919 CEST	1236	IN	Data Raw: a4 e5 36 1a 43 c6 47 d8 1b 9f 5d 5f 5f 5e 83 af 67 1f ae 5e fe 76 06 ef 2f 6f e1 fc f2 c3 fb d7 5b d8 5b 10 99 f8 fc 69 dd 8b 47 fe b3 da 5e 36 7c b9 f5 68 b9 37 2b 9a c5 2a df 28 8e c6 b1 80 44 09 6b 99 d8 bc 12 9a 33 ee 41 61 30 3b d9 1b 7f 2c Data Ascii: 6CG]__^g^v/o[[iG^6\|h7+*(Dk3Aa0;,%\Errk;Y,Qh0TA3SdR$RLWwA7-JR40im%d@:,5Hea2<DAUq\/Y+'<Tm^cx)<7$`%
Oct 13, 2024 17:51:46.269047976 CEST	1236	IN	Data Raw: fc 54 b8 52 6d cf d9 8e e4 3d 39 99 74 f1 b5 4d 6a 3d 3b 15 37 b8 34 d0 d7 4f 96 15 19 27 b4 f3 03 d6 79 0c e0 92 27 2a e1 32 32 a5 6d 91 90 3d 33 0c 9b 08 8b 7d 8b da 4a 27 a7 d2 35 4b f8 a0 73 81 ee bd 5d 6c 54 3a 5f db 30 18 1a e1 89 59 df 32 Data Ascii: TRm=9tMj=;74O'y'*22m=3}J'5Ks]lT:_0Y26F8InG.6_dzUZq4"s5R4=(f'{c83C\|$^J}gHplI[j[/G56#Bq$pN5-N60047a[a9ya4B0(
Oct 13, 2024 17:51:46.269094944 CEST	1041	IN	Data Raw: b5 db 67 c9 06 a6 de f8 da b2 59 c2 7a 4b 6f 0b 46 b7 18 66 b3 4b 6c 96 5d 04 b7 44 0d 58 3e bf 2b a1 91 35 4f 6a 07 9a 1c cc 3c 97 75 1e 13 2e 4b 21 74 8e e9 e0 e9 ef 5b 1c b9 45 b6 56 0e 88 11 0d 87 e3 64 a2 70 11 9c e5 bc 93 10 8a 69 15 4a cd Data Ascii: gYzKoFfKl]DX>+5Oj<u.K!t[EVdpiJ<8)3~(9szG\|o(X\v#S3fuHpi"S)f.Tr#'eR7as UT[7-6-Y-BE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49737	50.6.138.164	80	2032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 17:51:45.214155912 CEST	428	OUT	GET /assets/img/ajax-loader.gif HTTP/1.1 Host: mail.findmy-ld.help Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://mail.findmy-ld.help/icloud-archivos/code2022esp.php Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 17:51:45.728121996 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:51:45 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Sun, 07 May 2023 06:35:50 GMT Accept-Ranges: bytes Content-Length: 4178 Keep-Alive: timeout=5, max=75 Content-Type: image/gif Data Raw: 47 49 46 38 39 61 20 00 20 00 f5 00 00 ff ff ff 00 00 00 fa fa fa c4 c4 c4 e8 e8 e8 f0 f0 f0 d0 d0 d0 7e 7e 7e 9a 9a 9a f6 f6 f6 e6 e6 e6 fc fc fc 92 92 92 86 86 86 e2 e2 e2 b8 b8 b8 a0 a0 a0 ec ec ec ae ae ae dc dc dc 3e 3e 3e 56 56 56 60 60 60 7c 7c 7c a8 a8 a8 ee ee ee 4a 4a 4a 6c 6c 6c 0c 0c 0c 00 00 00 ce ce ce c8 c8 c8 d8 d8 d8 2c 2c 2c 5e 5e 5e 1e 1e 1e 4c 4c 4c b0 b0 b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 fe 1a 43 72 65 61 74 65 64 20 77 69 74 68 20 61 6a 61 78 6c 6f 61 64 2e 69 6e 66 6f 00 21 f9 04 09 0a 00 00 00 2c 00 00 00 00 20 00 20 00 00 06 ff 40 80 70 48 24 16 38 1c 47 71 c9 24 4e 12 c4 41 a7 33 28 0a 9a 4c 09 c5 12 9d 56 87 05 05 14 4b 7c 50 28 8f a1 94 3a 14 28 14 05 72 b1 42 d1 8c d7 5f 40 58 21 2f 1a ce 0c 42 78 42 6e 62 7d 45 [TRUNCATED] Data Ascii: GIF89a ~~~>>>VVV```\|\|\|JJJlll,,,^^^LLL!NETSCAPE2.0!Created with ajaxload.info!, @pH$8Gq$NA3(LVK\|P(:(rB_@X!/BxBnb}EgorEg^oWDcJCgoqmoE{p~rD}MdKro\|]q` 9Cf)$'=}C^u-H.!OK"15.&{jT BBoe6<@B?1)GbK !, @pH$&4Bq$Db(V[4_:t:"rqh@a)gBk_oEg~#rJDgxloWFC~mgoDBwK!CwE dXrs'xM&T$$\|MC ABldKdV?oFl-X L[J*6!"5\@poImN!QXm@%2u:uH2\R#a!, @pH$Bq$&D(LV[$:4
Oct 13, 2024 17:51:45.728224039 CEST	1236	IN	Data Raw: 50 28 0d 72 f1 73 86 02 d6 5f 80 85 a2 49 c8 89 05 67 13 42 78 42 0f 6f 10 7f 45 20 67 02 77 5e 00 09 1a 14 15 72 02 8e 46 67 57 85 10 6f 57 44 0c 63 42 0b 0a 0a 11 98 84 67 09 02 0e 0e 02 04 6f 1b 44 25 23 1d 1d 9f 00 19 a5 0a 05 76 0b 20 4a 45 Data Ascii: P(rs_IgBxBoE gw^rFgWoWDcBgoD%#v JEinE~"#Ld$LX"yrvEd)xWO<2I&1a"UJ(qz+kQ\" tRjO}C7":sdE& R"#-
Oct 13, 2024 17:51:45.728274107 CEST	1236	IN	Data Raw: a2 d0 a1 44 d3 56 f8 ce 0e e1 e3 2e 08 00 21 f9 04 09 0a 00 00 00 2c 00 00 00 00 20 00 20 00 00 06 ff 40 80 70 48 2c 2a 14 8b a2 72 49 4c 12 05 47 41 51 ca 54 26 14 99 67 94 58 50 24 aa d3 ad 10 aa a0 02 c8 05 70 31 72 1c 92 cd 99 b6 5a eb 1d 8b Data Ascii: DV.!, @pH,*rILGAQT&gXP$p1rZ9\|jfBGi~WeEy}RinlHCqNN]aGuzC`Ljz`dLKUWDcjs0R%+q"lQbw
Oct 13, 2024 17:51:45.728322029 CEST	738	IN	Data Raw: 43 0a 6c 94 56 60 58 9a 53 a2 1a a9 81 b0 f1 a5 cb 3f 58 90 09 71 b0 91 21 a8 2b 9b 00 14 bd 02 c3 e0 40 03 2a 2d 07 cc d2 84 cc c0 46 78 42 92 ce c2 f3 0b c4 01 04 5c 80 46 e5 a7 33 aa d6 ae b7 86 0d 5d 12 04 00 21 f9 04 09 0a 00 00 00 2c 00 00 Data Ascii: ClV`XS?Xq!+@-FxB\F3]!, @pH,rILGAQT&gXP$p1rZ9\|jEGi~WeEy#D}RinlHB!$CfCN]Ej$sLjNszEg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49739	50.6.138.164	80	2032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 17:51:45.214507103 CEST	409	OUT	GET /sep.png HTTP/1.1 Host: mail.findmy-ld.help Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://mail.findmy-ld.help/icloud-archivos/code2022esp.php Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 17:51:45.739273071 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:51:45 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Sun, 07 May 2023 06:36:54 GMT Accept-Ranges: bytes Content-Length: 1240 Keep-Alive: timeout=5, max=75 Content-Type: image/png Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 7e 00 00 00 32 04 03 00 00 00 a9 19 ad 6c 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 00 0f 50 4c 54 45 e8 e8 e8 e1 e1 e1 e1 e1 e1 e0 e0 e0 b6 b6 b6 d7 b9 84 90 00 00 00 05 74 52 4e 53 01 06 0c 12 39 f4 8b 71 62 00 00 04 5e 49 44 41 54 68 de ed 59 eb 99 e2 30 0c b4 3a 90 dd 81 ed 0e cc 75 c0 f5 5f d3 59 23 f9 91 dd 00 d9 bd 38 fc 41 b0 f9 f8 58 88 35 a3 d1 c3 c6 39 35 f6 62 c1 a7 6a b7 66 f7 3f b0 fb df b7 d8 fd 2f 56 bf dd bb 3f a5 3a 17 e0 a8 27 b7 67 4c 86 23 a4 94 6f a5 5e 53 29 25 27 79 91 ca ed 2a cb e2 68 ca 75 c5 fa a2 04 78 1e a3 fa 5d 5d dc 77 dd 51 75 bf 9a e2 f3 f5 0b 09 56 04 c2 75 be 37 aa 4b ba 55 04 b0 18 a3 b1 ce 62 8e e1 ee 57 23 fc 79 8b 40 f4 31 85 20 10 72 ae cf 7c 2d 82 ba 5a be 25 89 7c 82 1b 06 a0 ba 46 24 ae f3 ae fb a0 bf f1 1f e5 6b 16 01 09 c1 2d e7 eb f4 93 eb 13 0a 4a 0a 20 f8 68 fc 7b 08 c5 ed b2 0f 04 35 40 96 02 35 09 a2 ea b0 de 4c f8 bf 0a 01 96 92 a0 9b 7c 44 40 2a fe 8a a0 32 bc 0b [TRUNCATED] Data Ascii: PNGIHDR~2lpHYs~PLTEtRNS9qb^IDAThY0:u_Y#8AX595bjf?/V?:'gL#o^S)%'yhux]]wQuVu7KUbW#y@1 r\|-Z%\|F$k-J h{5@5L\|D@2.(\OW+:QB4/ ?K(x+ =)r/P;.UX-t&THD[aA0gzF^@OSvk,4V~Ac0 ;jo A(?:R8\|Em\|~SR!MBki>\|\|@h=Jc-??9h:K19PmF$4%) 0<nY$z2^uET;qdPjyQ,UydDm`!nlTx?TC[i$:MCm`WQctZfkz%, 20:3{6JXmDXiv?!p{46uW=kyLB_9{1>Fhq~z4=:{7o:1>1=}+<<Y',Pk$$J"V#f{
Oct 13, 2024 17:51:45.740591049 CEST	272	IN	Data Raw: 09 ad a7 dd 5b e9 23 94 10 a5 93 8f 57 4e 85 49 86 57 fb b6 0c 74 88 83 95 a4 45 17 70 c4 aa d7 76 20 3e 6f 0f e9 30 f9 3c cd a3 7a e8 a5 c9 2c 83 a9 c6 76 c1 05 69 a6 aa 1f d4 b5 5a fe 83 00 68 fd 99 e7 6c b6 16 82 21 70 95 fb 9e db 16 cb ba cf Data Ascii: [#WNIWtEpv >o0<z,viZhl!pf(swp^ M[smKK?~+q]c2<wmk_OS+Kcg515eYr?zv}N>fc,^hCTss!bIEbQU
Oct 13, 2024 17:51:46.016710997 CEST	411	OUT	GET /icloud-archivos/myriad-set-pro_thin.woff HTTP/1.1 Host: mail.findmy-ld.help Connection: keep-alive Origin: http://mail.findmy-ld.help User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://mail.findmy-ld.help/icloud-archivos/fonts.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 17:51:46.144846916 CEST	1236	IN	HTTP/1.1 404 Not Found Date: Sun, 13 Oct 2024 15:51:46 GMT Server: Apache Last-Modified: Wed, 24 May 2023 01:50:54 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 4677 Keep-Alive: timeout=5, max=74 Connection: Keep-Alive Content-Type: text/html Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 52 6d 73 d3 c8 96 fe 0c bf e2 8c 73 67 80 aa d8 4a 26 61 76 b0 15 df 82 90 0c b9 05 24 9b 84 e5 4e 6d ed 52 6d e9 48 ea 49 ab 8f e8 6e d9 d6 4d cd fe f6 3d dd 92 5f 63 b8 70 77 0d b1 a5 7e 79 ce f3 16 ff f0 fa f2 f4 f6 f7 ab 33 28 5c a9 e0 ea c3 ab b7 17 a7 d0 eb 47 d1 c7 a3 d3 28 7a 7d fb 1a fe fe e6 f6 dd 5b 38 1c 1c c0 8d 33 32 71 51 74 f6 be 07 bd c2 b9 6a 18 45 b3 d9 6c 30 3b 1a 90 c9 a3 db eb 68 ee 51 0e fd b5 ee b1 6f c3 9d 41 ea d2 de f8 71 1c 86 cc 4b a5 ed c9 0e 80 c3 17 2f 5e b4 f7 7a fe d0 50 09 9d 9f f4 50 f7 60 f9 e4 31 50 a4 50 19 ca a4 c2 25 4a 5e 56 79 c0 98 67 3a 3a 3c e4 73 d0 7d e2 12 9d 00 7f ac 8f 9f 6b 39 3d e9 9d 92 76 a8 5d ff b6 a9 b0 07 49 fb 76 d2 73 38 77 91 1f 3e 82 a4 10 c6 a2 3b a9 5d d6 ff b5 07 d1 1a 9a 93 4e e1 f8 f8 e0 18 fa 70 f5 f2 b7 33 78 7f 79 0b e7 97 1f de bf 8e a3 76 ef f1 e3 47 fc 89 7f e8 f7 e1 65 9a c2 8d 92 29 c2 65 ed 2c f4 fb e3 76 cf 26 46 56 0e ac 49 96 02 12 4a 71 f0 c7 e7 1a 4d 33 48 a8 8c da c7 fe d1 e0 68 70 38 [TRUNCATED] Data Ascii: RmssgJ&av$NmRmHInM=_cpw~y3(\G(z}[832qQtjEl0;hQoAqK/^zPP`1PP%J^Vyg::<s}k9=v]Ivs8w>;]Np3xyvGe)e,v&FVIJqM3Hhp8(a{8jotEI.6q^>YZQH]rBis_4:Jar!c(j):{{d!5Dh4+k5yUD$wZ}YQO,5I>i6<]2XpCMe^Wh2.\|~l'\|v,sTWdG'8RFOE>8.V?\~[KJzp=4LB)YyuFMYb;Cd5[&TWRd{/_lyoY'+G;G\?zJL9*~"P,EO$}(OW<2X!SSQrxOx"#DJMAP!3-uH26?<gR;1<]9G$Vp0sBQ=f%afQmB<qMZq0&Vk
Oct 13, 2024 17:51:46.144895077 CEST	1236	IN	Data Raw: 49 26 3b f9 fa 41 83 05 ea 7d 2a 6d a5 44 33 d4 a4 71 b1 99 49 63 79 2b 21 45 66 c8 7d ce 7e f9 e5 e0 60 b1 69 91 ef a6 ab dd a3 c9 f3 17 2f 7e 5d ec ba 42 9a b5 cd c3 17 bf 26 87 2f 56 43 53 84 7b 98 88 e4 2e 37 54 eb b4 bf 38 87 cf fd bf 11 0b Data Ascii: I&;A}mD3qIcy+!Ef}~`i/~]B&/VCS{.7T81),)VRCx{k_hT!dnD3bxixqTHr2=-c/7UtoGc-'9_e$'(e66FANz=86CG]__^g
Oct 13, 2024 17:51:46.144970894 CEST	1236	IN	Data Raw: 7f 5f 9a cc 0f 7c 7e cc 8d 47 d3 16 aa a5 c0 11 77 9c 06 70 2d f3 c2 71 9d 65 72 e7 67 b7 4d f9 97 a6 78 33 93 82 c8 22 5c 19 aa d0 38 89 76 00 b7 8c 58 2d df 59 8d 52 e0 90 bf bc 76 3f ae 12 5e 1f 5f 0e 51 fa 28 da aa 25 42 fb 6a 70 ac 19 d5 3a Data Ascii: _\|~Gwp-qergMx3"\8vX-YRv?^_Q(%Bjp:}P[_0uBTg0+\|~@('H{3jsrTMsMDk={j-o\|m4aG+.<W6CYkGm^jTRm=9tMj=;
Oct 13, 2024 17:51:46.146053076 CEST	1236	IN	Data Raw: 14 ae c5 80 4c 2a 8c 23 31 8e 23 06 59 f2 f0 d3 3a 38 d6 e1 50 bb de 46 46 b7 2c 79 13 c3 eb 75 2c de 42 97 c2 94 0d 7e ca ef ce d4 fc 46 da 3e 63 a3 84 03 87 6c 70 70 13 cd 94 f3 29 5a 76 13 0c 5e b2 55 09 1a 0f 04 36 41 2d 8c a4 36 a7 16 95 33 Data Ascii: L#1#Y:8PFF,yu,B~F>clpp)Zv^U6A-63YZ2Zsc]1Z [SiXCY^WQCbK~+n:)@UP7RpWO~b!/r@l-ElQK$gYzKoF
Oct 13, 2024 17:51:46.146104097 CEST	29	IN	Data Raw: b7 fe ec 9e d9 f5 30 98 c9 c5 d1 84 d2 26 3c 14 ae 64 4b ff 17 cc cb 70 7c 28 2e 00 00 Data Ascii: 0&<dKp\|(.
Oct 13, 2024 17:51:46.152450085 CEST	410	OUT	GET /icloud-archivos/myriad-set-pro_thin.ttf HTTP/1.1 Host: mail.findmy-ld.help Connection: keep-alive Origin: http://mail.findmy-ld.help User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://mail.findmy-ld.help/icloud-archivos/fonts.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 17:51:46.284673929 CEST	1236	IN	HTTP/1.1 404 Not Found Date: Sun, 13 Oct 2024 15:51:46 GMT Server: Apache Last-Modified: Wed, 24 May 2023 01:50:54 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 4677 Keep-Alive: timeout=5, max=73 Connection: Keep-Alive Content-Type: text/html Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 52 6d 73 d3 c8 96 fe 0c bf e2 8c 73 67 80 aa d8 4a 26 61 76 b0 15 df 82 90 0c b9 05 24 9b 84 e5 4e 6d ed 52 6d e9 48 ea 49 ab 8f e8 6e d9 d6 4d cd fe f6 3d dd 92 5f 63 b8 70 77 0d b1 a5 7e 79 ce f3 16 ff f0 fa f2 f4 f6 f7 ab 33 28 5c a9 e0 ea c3 ab b7 17 a7 d0 eb 47 d1 c7 a3 d3 28 7a 7d fb 1a fe fe e6 f6 dd 5b 38 1c 1c c0 8d 33 32 71 51 74 f6 be 07 bd c2 b9 6a 18 45 b3 d9 6c 30 3b 1a 90 c9 a3 db eb 68 ee 51 0e fd b5 ee b1 6f c3 9d 41 ea d2 de f8 71 1c 86 cc 4b a5 ed c9 0e 80 c3 17 2f 5e b4 f7 7a fe d0 50 09 9d 9f f4 50 f7 60 f9 e4 31 50 a4 50 19 ca a4 c2 25 4a 5e 56 79 c0 98 67 3a 3a 3c e4 73 d0 7d e2 12 9d 00 7f ac 8f 9f 6b 39 3d e9 9d 92 76 a8 5d ff b6 a9 b0 07 49 fb 76 d2 73 38 77 91 1f 3e 82 a4 10 c6 a2 3b a9 5d d6 ff b5 07 d1 1a 9a 93 4e e1 f8 f8 e0 18 fa 70 f5 f2 b7 33 78 7f 79 0b e7 97 1f de bf 8e a3 76 ef f1 e3 47 fc 89 7f e8 f7 e1 65 9a c2 8d 92 29 c2 65 ed 2c f4 fb e3 76 cf 26 46 56 0e ac 49 96 02 12 4a 71 f0 c7 e7 1a 4d 33 48 a8 8c da c7 fe d1 e0 68 70 38 [TRUNCATED] Data Ascii: RmssgJ&av$NmRmHInM=_cpw~y3(\G(z}[832qQtjEl0;hQoAqK/^zPP`1PP%J^Vyg::<s}k9=v]Ivs8w>;]Np3xyvGe)e,v&FVIJqM3Hhp8(a{8jotEI.6q^>YZQH]rBis_4:Jar!c(j):{{d!5Dh4+k5yUD$wZ}YQO,5I>i6<]2XpCMe^Wh2.\|~l'\|v,sTWdG'8RFOE>8.V?\~[KJzp=4LB)YyuFMYb;Cd5[&TWRd{/_lyoY'+G;G\?zJL9*~"P,EO$}(OW<2X!SSQrxOx"#DJMAP!3-uH26?<gR;1<]9G$Vp0sBQ=f%afQmB<qMZq0&Vk
Oct 13, 2024 17:51:46.284739017 CEST	1236	IN	Data Raw: 49 26 3b f9 fa 41 83 05 ea 7d 2a 6d a5 44 33 d4 a4 71 b1 99 49 63 79 2b 21 45 66 c8 7d ce 7e f9 e5 e0 60 b1 69 91 ef a6 ab dd a3 c9 f3 17 2f 7e 5d ec ba 42 9a b5 cd c3 17 bf 26 87 2f 56 43 53 84 7b 98 88 e4 2e 37 54 eb b4 bf 38 87 cf fd bf 11 0b Data Ascii: I&;A}mD3qIcy+!Ef}~`i/~]B&/VCS{.7T81),)VRCx{k_hT!dnD3bxixqTHr2=-c/7UtoGc-'9_e$'(e66FANz=86CG]__^g
Oct 13, 2024 17:51:46.284759045 CEST	1236	IN	Data Raw: 7f 5f 9a cc 0f 7c 7e cc 8d 47 d3 16 aa a5 c0 11 77 9c 06 70 2d f3 c2 71 9d 65 72 e7 67 b7 4d f9 97 a6 78 33 93 82 c8 22 5c 19 aa d0 38 89 76 00 b7 8c 58 2d df 59 8d 52 e0 90 bf bc 76 3f ae 12 5e 1f 5f 0e 51 fa 28 da aa 25 42 fb 6a 70 ac 19 d5 3a Data Ascii: _\|~Gwp-qergMx3"\8vX-YRv?^_Q(%Bjp:}P[_0uBTg0+\|~@('H{3jsrTMsMDk={j-o\|m4aG+.<W6CYkGm^jTRm=9tMj=;
Oct 13, 2024 17:51:46.284910917 CEST	1236	IN	Data Raw: 14 ae c5 80 4c 2a 8c 23 31 8e 23 06 59 f2 f0 d3 3a 38 d6 e1 50 bb de 46 46 b7 2c 79 13 c3 eb 75 2c de 42 97 c2 94 0d 7e ca ef ce d4 fc 46 da 3e 63 a3 84 03 87 6c 70 70 13 cd 94 f3 29 5a 76 13 0c 5e b2 55 09 1a 0f 04 36 41 2d 8c a4 36 a7 16 95 33 Data Ascii: L#1#Y:8PFF,yu,B~F>clpp)Zv^U6A-63YZ2Zsc]1Z [SiXCY^WQCbK~+n:)@UP7RpWO~b!/r@l-ElQK$gYzKoF
Oct 13, 2024 17:51:46.284929037 CEST	29	IN	Data Raw: b7 fe ec 9e d9 f5 30 98 c9 c5 d1 84 d2 26 3c 14 ae 64 4b ff 17 cc cb 70 7c 28 2e 00 00 Data Ascii: 0&<dKp\|(.
Oct 13, 2024 17:51:46.472204924 CEST	413	OUT	GET /favicon.ico HTTP/1.1 Host: mail.findmy-ld.help Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://mail.findmy-ld.help/icloud-archivos/code2022esp.php Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 17:51:46.598370075 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:51:46 GMT Server: Apache Last-Modified: Thu, 15 Apr 2021 20:52:24 GMT Accept-Ranges: bytes Content-Length: 9062 Cache-Control: max-age=604800 Expires: Sun, 20 Oct 2024 15:51:46 GMT Keep-Alive: timeout=5, max=72 Connection: Keep-Alive Content-Type: image/x-icon Data Raw: 00 00 01 00 04 00 20 20 00 00 01 00 08 00 a8 08 00 00 46 00 00 00 10 10 00 00 01 00 08 00 68 05 00 00 ee 08 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 56 0e 00 00 10 10 00 00 01 00 20 00 68 04 00 00 fe 1e 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 42 42 42 00 9e 9e 9e 00 72 72 72 00 ce ce ce 00 5a 5a 5a 00 b6 b6 b6 00 e6 e6 e6 00 92 92 92 00 4e 4e 4e 00 7e 7e 7e 00 66 66 66 00 aa aa aa 00 da da da 00 c2 c2 c2 00 f2 f2 f2 00 4a 4a 4a 00 a6 a6 a6 00 7a 7a 7a 00 62 62 62 00 56 56 56 00 86 86 86 00 6e 6e 6e 00 e2 e2 e2 00 ca ca ca 00 46 46 46 00 a2 a2 a2 00 76 76 76 00 d2 d2 d2 00 5e 5e 5e 00 ba ba ba 00 ea ea ea 00 9a 9a 9a 00 52 52 52 00 82 82 82 00 6a 6a 6a 00 ae ae ae 00 de de de 00 c6 c6 c6 00 f6 f6 f6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: Fh V h( @BBBrrrZZZNNN~~~fffJJJzzzbbbVVVnnnFFFvvv^^^RRRjjj
Oct 13, 2024 17:51:46.598392010 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: '''''''''''''''''''''''''''''

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49743	50.6.138.164	80	2032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 17:51:46.270800114 CEST	279	OUT	GET /sep.png HTTP/1.1 Host: mail.findmy-ld.help Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 17:51:46.768230915 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:51:46 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Sun, 07 May 2023 06:36:54 GMT Accept-Ranges: bytes Content-Length: 1240 Keep-Alive: timeout=5, max=75 Content-Type: image/png Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 7e 00 00 00 32 04 03 00 00 00 a9 19 ad 6c 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 00 0f 50 4c 54 45 e8 e8 e8 e1 e1 e1 e1 e1 e1 e0 e0 e0 b6 b6 b6 d7 b9 84 90 00 00 00 05 74 52 4e 53 01 06 0c 12 39 f4 8b 71 62 00 00 04 5e 49 44 41 54 68 de ed 59 eb 99 e2 30 0c b4 3a 90 dd 81 ed 0e cc 75 c0 f5 5f d3 59 23 f9 91 dd 00 d9 bd 38 fc 41 b0 f9 f8 58 88 35 a3 d1 c3 c6 39 35 f6 62 c1 a7 6a b7 66 f7 3f b0 fb df b7 d8 fd 2f 56 bf dd bb 3f a5 3a 17 e0 a8 27 b7 67 4c 86 23 a4 94 6f a5 5e 53 29 25 27 79 91 ca ed 2a cb e2 68 ca 75 c5 fa a2 04 78 1e a3 fa 5d 5d dc 77 dd 51 75 bf 9a e2 f3 f5 0b 09 56 04 c2 75 be 37 aa 4b ba 55 04 b0 18 a3 b1 ce 62 8e e1 ee 57 23 fc 79 8b 40 f4 31 85 20 10 72 ae cf 7c 2d 82 ba 5a be 25 89 7c 82 1b 06 a0 ba 46 24 ae f3 ae fb a0 bf f1 1f e5 6b 16 01 09 c1 2d e7 eb f4 93 eb 13 0a 4a 0a 20 f8 68 fc 7b 08 c5 ed b2 0f 04 35 40 96 02 35 09 a2 ea b0 de 4c f8 bf 0a 01 96 92 a0 9b 7c 44 40 2a fe 8a a0 32 bc 0b [TRUNCATED] Data Ascii: PNGIHDR~2lpHYs~PLTEtRNS9qb^IDAThY0:u_Y#8AX595bjf?/V?:'gL#o^S)%'yhux]]wQuVu7KUbW#y@1 r\|-Z%\|F$k-J h{5@5L\|D@2.(\OW+:QB4/ ?K(x+ =)r/P;.UX-t&THD[aA0gzF^@OSvk,4V~Ac0 ;jo A(?:R8\|Em\|~SR!MBki>\|\|@h=Jc-??9h:K19PmF$4%) 0<nY$z2^uET;qdPjyQ,UydDm`!nlTx?TC[i$:MCm`WQctZfkz%, 20:3{6JXmDXiv?!p{46uW=kyLB_9{1>Fhq~z4=:{7o:1>1=}+<<Y',Pk$$J"V#f{
Oct 13, 2024 17:51:46.768280983 CEST	272	IN	Data Raw: 09 ad a7 dd 5b e9 23 94 10 a5 93 8f 57 4e 85 49 86 57 fb b6 0c 74 88 83 95 a4 45 17 70 c4 aa d7 76 20 3e 6f 0f e9 30 f9 3c cd a3 7a e8 a5 c9 2c 83 a9 c6 76 c1 05 69 a6 aa 1f d4 b5 5a fe 83 00 68 fd 99 e7 6c b6 16 82 21 70 95 fb 9e db 16 cb ba cf Data Ascii: [#WNIWtEpv >o0<z,viZhl!pf(swp^ M[smKK?~+q]c2<wmk_OS+Kcg515eYr?zv}N>fc,^hCTss!bIEbQU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49744	50.6.138.164	80	2032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 17:51:46.270884037 CEST	298	OUT	GET /assets/img/ajax-loader.gif HTTP/1.1 Host: mail.findmy-ld.help Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 17:51:46.771640062 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:51:46 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Sun, 07 May 2023 06:35:50 GMT Accept-Ranges: bytes Content-Length: 4178 Keep-Alive: timeout=5, max=75 Content-Type: image/gif Data Raw: 47 49 46 38 39 61 20 00 20 00 f5 00 00 ff ff ff 00 00 00 fa fa fa c4 c4 c4 e8 e8 e8 f0 f0 f0 d0 d0 d0 7e 7e 7e 9a 9a 9a f6 f6 f6 e6 e6 e6 fc fc fc 92 92 92 86 86 86 e2 e2 e2 b8 b8 b8 a0 a0 a0 ec ec ec ae ae ae dc dc dc 3e 3e 3e 56 56 56 60 60 60 7c 7c 7c a8 a8 a8 ee ee ee 4a 4a 4a 6c 6c 6c 0c 0c 0c 00 00 00 ce ce ce c8 c8 c8 d8 d8 d8 2c 2c 2c 5e 5e 5e 1e 1e 1e 4c 4c 4c b0 b0 b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 fe 1a 43 72 65 61 74 65 64 20 77 69 74 68 20 61 6a 61 78 6c 6f 61 64 2e 69 6e 66 6f 00 21 f9 04 09 0a 00 00 00 2c 00 00 00 00 20 00 20 00 00 06 ff 40 80 70 48 24 16 38 1c 47 71 c9 24 4e 12 c4 41 a7 33 28 0a 9a 4c 09 c5 12 9d 56 87 05 05 14 4b 7c 50 28 8f a1 94 3a 14 28 14 05 72 b1 42 d1 8c d7 5f 40 58 21 2f 1a ce 0c 42 78 42 6e 62 7d 45 [TRUNCATED] Data Ascii: GIF89a ~~~>>>VVV```\|\|\|JJJlll,,,^^^LLL!NETSCAPE2.0!Created with ajaxload.info!, @pH$8Gq$NA3(LVK\|P(:(rB_@X!/BxBnb}EgorEg^oWDcJCgoqmoE{p~rD}MdKro\|]q` 9Cf)$'=}C^u-H.!OK"15.&{jT BBoe6<@B?1)GbK !, @pH$&4Bq$Db(V[4_:t:"rqh@a)gBk_oEg~#rJDgxloWFC~mgoDBwK!CwE dXrs'xM&T$$\|MC ABldKdV?oFl-X L[J*6!"5\@poImN!QXm@%2u:uH2\R#a!, @pH$Bq$&D(LV[$:4
Oct 13, 2024 17:51:46.771711111 CEST	1236	IN	Data Raw: 50 28 0d 72 f1 73 86 02 d6 5f 80 85 a2 49 c8 89 05 67 13 42 78 42 0f 6f 10 7f 45 20 67 02 77 5e 00 09 1a 14 15 72 02 8e 46 67 57 85 10 6f 57 44 0c 63 42 0b 0a 0a 11 98 84 67 09 02 0e 0e 02 04 6f 1b 44 25 23 1d 1d 9f 00 19 a5 0a 05 76 0b 20 4a 45 Data Ascii: P(rs_IgBxBoE gw^rFgWoWDcBgoD%#v JEinE~"#Ld$LX"yrvEd)xWO<2I&1a"UJ(qz+kQ\" tRjO}C7":sdE& R"#-
Oct 13, 2024 17:51:46.771733046 CEST	1236	IN	Data Raw: a2 d0 a1 44 d3 56 f8 ce 0e e1 e3 2e 08 00 21 f9 04 09 0a 00 00 00 2c 00 00 00 00 20 00 20 00 00 06 ff 40 80 70 48 2c 2a 14 8b a2 72 49 4c 12 05 47 41 51 ca 54 26 14 99 67 94 58 50 24 aa d3 ad 10 aa a0 02 c8 05 70 31 72 1c 92 cd 99 b6 5a eb 1d 8b Data Ascii: DV.!, @pH,*rILGAQT&gXP$p1rZ9\|jfBGi~WeEy}RinlHCqNN]aGuzC`Ljz`dLKUWDcjs0R%+q"lQbw
Oct 13, 2024 17:51:46.772037029 CEST	738	IN	Data Raw: 43 0a 6c 94 56 60 58 9a 53 a2 1a a9 81 b0 f1 a5 cb 3f 58 90 09 71 b0 91 21 a8 2b 9b 00 14 bd 02 c3 e0 40 03 2a 2d 07 cc d2 84 cc c0 46 78 42 92 ce c2 f3 0b c4 01 04 5c 80 46 e5 a7 33 aa d6 ae b7 86 0d 5d 12 04 00 21 f9 04 09 0a 00 00 00 2c 00 00 Data Ascii: ClV`XS?Xq!+@-FxB\F3]!, @pH,rILGAQT&gXP$p1rZ9\|jEGi~WeEy#D}RinlHB!$CfCN]Ej$sLjNszEg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49747	50.6.138.164	80	2032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 17:51:46.708008051 CEST	283	OUT	GET /favicon.ico HTTP/1.1 Host: mail.findmy-ld.help Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 17:51:47.250395060 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:51:47 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Thu, 15 Apr 2021 20:52:24 GMT Accept-Ranges: bytes Content-Length: 9062 Cache-Control: max-age=604800 Expires: Sun, 20 Oct 2024 15:51:47 GMT Keep-Alive: timeout=5, max=75 Content-Type: image/x-icon Data Raw: 00 00 01 00 04 00 20 20 00 00 01 00 08 00 a8 08 00 00 46 00 00 00 10 10 00 00 01 00 08 00 68 05 00 00 ee 08 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 56 0e 00 00 10 10 00 00 01 00 20 00 68 04 00 00 fe 1e 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 42 42 42 00 9e 9e 9e 00 72 72 72 00 ce ce ce 00 5a 5a 5a 00 b6 b6 b6 00 e6 e6 e6 00 92 92 92 00 4e 4e 4e 00 7e 7e 7e 00 66 66 66 00 aa aa aa 00 da da da 00 c2 c2 c2 00 f2 f2 f2 00 4a 4a 4a 00 a6 a6 a6 00 7a 7a 7a 00 62 62 62 00 56 56 56 00 86 86 86 00 6e 6e 6e 00 e2 e2 e2 00 ca ca ca 00 46 46 46 00 a2 a2 a2 00 76 76 76 00 d2 d2 d2 00 5e 5e 5e 00 ba ba ba 00 ea ea ea 00 9a 9a 9a 00 52 52 52 00 82 82 82 00 6a 6a 6a 00 ae ae ae 00 de de de 00 c6 c6 c6 00 f6 f6 f6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: Fh V h( @BBBrrrZZZNNN~~~fffJJJzzzbbbVVVnnnFFFvvv^^^RRRjjj
Oct 13, 2024 17:51:47.250426054 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: '''
Oct 13, 2024 17:51:47.250438929 CEST	1236	IN	Data Raw: 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 27 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e3 e3 ff ff c0 01 ff ff 80 00 ff ff 00 00 7f ff 00 00 7f fe 00 00 3f fe 00 00 3f fe 00 00 3f fc 00 00 7f fc 00 Data Ascii: ''''''''''''''''''''''''''''????( FFFrrr^^^RRRjjj
Oct 13, 2024 17:51:47.250449896 CEST	1236	IN	Data Raw: 21 21 21 21 21 07 18 21 21 21 18 21 21 21 21 21 21 21 21 21 05 14 14 10 0c 12 04 10 21 21 21 21 21 21 21 09 08 14 04 04 04 04 04 04 16 21 21 21 21 21 21 06 04 19 19 19 19 19 19 19 19 1d 21 21 21 21 07 00 04 12 12 12 12 12 12 12 04 1a 21 21 21 21 Data Ascii: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!{
Oct 13, 2024 17:51:47.250461102 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 38 38 38 20 4c 4c 4c ef 5c 5c 5c ff 61 61 61 ff 61 61 61 ff 61 61 61 ff 61 61 61 ff 61 61 61 ff 61 61 61 ff 61 61 61 ff 61 61 61 ff 61 61 Data Ascii: 888 LLL\\\aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa```pBBBWWWaaabbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb```
Oct 13, 2024 17:51:47.250473022 CEST	1236	IN	Data Raw: 6e 6e 6e ff 6e 6e 6e ff 6e 6e 6e ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3c 3c 3c 80 4b 4b 4b ff 63 63 Data Ascii: nnnnnnnnn<<<KKKcccooopppppppppppppppppppppppppppppppppppppppjjj0:::0DDD[[[mmmrrrrrrrrrrrrrrrrrrrrr
Oct 13, 2024 17:51:47.250483036 CEST	776	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 43 43 43 df 53 53 53 ff 65 65 65 ff 71 71 71 df 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: CCCSSSeeeqqq@@@0DDDMMMYYYxxx1
Oct 13, 2024 17:51:47.342926025 CEST	1212	IN	Data Raw: fe 00 00 3f fc 00 00 7f fc 00 00 ff fc 00 00 ff fc 00 01 ff fc 00 01 ff fc 00 00 ff fc 00 00 ff fe 00 00 7f fe 00 00 3f ff 00 00 7f ff 81 80 ff ff ff 1f ff ff ff 0f ff ff ff 07 ff ff ff 87 ff ff ff 83 ff ff ff e3 ff ff ff ff ff ff ff ff ff ff ff Data Ascii: ??( 3[[[8PPP0

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49750	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:51:48 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-13 15:51:49 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=176026 Date: Sun, 13 Oct 2024 15:51:49 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49751	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:51:50 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-13 15:51:50 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=175966 Date: Sun, 13 Oct 2024 15:51:50 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-13 15:51:50 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49752	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:51:55 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=7T7wLrOWYAp4Pxm&MD=G9egVCbR HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-13 15:51:55 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: bd5cd9f4-5f5d-4721-abcb-9afaa1667732 MS-RequestId: 0d94339b-023a-4a04-b6f9-be794e04c93f MS-CV: 6iMwjKhGTUOwHgb2.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Sun, 13 Oct 2024 15:51:55 GMT Connection: close Content-Length: 24490
2024-10-13 15:51:55 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-13 15:51:55 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	56471	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:11 UTC	124	OUT	GET /sls/ping HTTP/1.1 Connection: Keep-Alive User-Agent: DNS resiliency checker/1.0 Host: slscr.update.microsoft.com
2024-10-13 15:52:11 UTC	318	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Expires: -1 MS-CV: wZEOCblf1UaF5Dpj.0 MS-RequestId: 6511b7ea-17ce-40e7-9412-35aafe036257 MS-CorrelationId: 5e926787-a093-4d23-ab40-77707ef0ebeb X-Content-Type-Options: nosniff Date: Sun, 13 Oct 2024 15:52:11 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	56472	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:13 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=7T7wLrOWYAp4Pxm&MD=G9egVCbR HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-13 15:52:14 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: f46a8333-e7c1-4e1e-8044-5a74acde0f4b MS-RequestId: fda7f96f-e3ff-45e7-b641-e3717c4f0dc7 MS-CV: vodVbwYvN0O3RI5c.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Sun, 13 Oct 2024 15:52:13 GMT Connection: close Content-Length: 24490
2024-10-13 15:52:14 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-13 15:52:14 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	56473	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:15 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=7T7wLrOWYAp4Pxm&MD=G9egVCbR HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-13 15:52:15 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 8027daf2-672f-4b59-b060-1789e582adc8 MS-RequestId: cec44d56-e777-480f-880c-f39733d9f175 MS-CV: tEdqdB1Dp0+3WNVZ.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Sun, 13 Oct 2024 15:52:15 GMT Connection: close Content-Length: 30005
2024-10-13 15:52:15 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-10-13 15:52:15 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.4	56474	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:37 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:37 UTC	540	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:37 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Sat, 12 Oct 2024 04:31:01 GMT ETag: "0x8DCEA76AD821850" x-ms-request-id: 5e3cf53f-d01e-007a-3ba0-1cf38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155237Z-17db6f7c8cf8rgvlb86c9c0098000000033g00000000en18 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:37 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-13 15:52:37 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-13 15:52:37 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-13 15:52:37 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-13 15:52:37 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-13 15:52:37 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-13 15:52:37 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-13 15:52:37 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-13 15:52:37 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-13 15:52:37 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.4	56477	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:38 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:38 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:38 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 695c64e8-001e-0034-5de7-1add04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155238Z-17db6f7c8cf5mtxmr1c51513n000000005ag000000005nh3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:38 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.4	56476	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:38 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:38 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:38 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 466b9802-701e-000d-0d1f-1c6de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155238Z-17db6f7c8cfvtw4hh2496wp8p800000003fg00000000bh90 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:38 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.4	56475	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:38 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:38 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:38 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 971a1148-a01e-000d-48cd-1ad1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155238Z-17db6f7c8cfnqpbkckdefmqa44000000056g000000001x37 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:38 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.4	56478	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:38 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:38 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:38 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: d08e5818-a01e-003d-3417-1c98d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155238Z-17db6f7c8cfvq8pt2ak3arkg6n00000002zg00000000evx1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:38 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.4	56479	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:38 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:38 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:38 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: e1b47659-601e-00ab-14a3-1b66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155238Z-17db6f7c8cfq2j6f03aq9y8dns000000047g00000000cbn6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:38 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.4	56480	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:39 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:39 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:39 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: c05b1842-801e-0048-291c-1cf3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155239Z-17db6f7c8cffhvbz3mt0ydz7x400000003d0000000000b93 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:39 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	56481	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:39 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:39 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:39 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 6c20420a-501e-008f-0947-1c9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155239Z-17db6f7c8cffhvbz3mt0ydz7x4000000036000000000fa0z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:39 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	56484	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:39 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:39 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:39 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: efaf982b-c01e-008e-2e47-1c7381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155239Z-17db6f7c8cf6f7vv3recfp4a6w0000000270000000003yku x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:39 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	56482	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:39 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:39 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:39 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: a417ae39-101e-008e-1f1c-1bcf88000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155239Z-17db6f7c8cfvq8pt2ak3arkg6n000000035g000000002knm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:39 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	56483	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:39 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:39 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:39 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 0e59abf9-f01e-003c-2b47-1c8cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155239Z-17db6f7c8cffhvbz3mt0ydz7x4000000039g000000008t20 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:39 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	56485	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:40 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:40 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:40 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: c9e2a668-e01e-001f-5fd7-1a1633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155240Z-17db6f7c8cfspvtq2pgqb2w5k0000000052g000000001ag4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:40 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	56486	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:40 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:40 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:40 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: b3ad5e0b-501e-000a-1fe3-1a0180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155240Z-17db6f7c8cfp6mfve0htepzbps00000004dg00000000czfs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:40 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	56487	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:40 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:40 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:40 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 458f517b-301e-000c-2fe6-1a323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155240Z-17db6f7c8cfqxt4wrzg7st2fm8000000058g000000004b8w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:40 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	56488	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:40 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:40 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:40 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: cbdfa3b4-e01e-0051-2293-1c84b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155240Z-17db6f7c8cfjxfnba42c5rukwg000000024g000000003pxq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:40 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	56489	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:40 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:40 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:40 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 6fbaa347-101e-0034-2f47-1c96ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155240Z-17db6f7c8cfvq8pt2ak3arkg6n000000032000000000a0mm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:40 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	56491	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:40 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:41 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:40 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: eb753988-701e-0021-591f-1c3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155240Z-17db6f7c8cf9wwz8ehu7c5p33g00000002bg00000000a3t0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:41 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	56490	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:40 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:41 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:40 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 23cc8f65-401e-0048-2a25-1c0409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155240Z-17db6f7c8cfmhggkx889x958tc000000029g000000007a5x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:41 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	56492	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:41 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:41 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:41 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 44a7bd4c-801e-007b-1416-1ce7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155241Z-17db6f7c8cfvq8pt2ak3arkg6n00000003500000000040fv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:41 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	56494	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:41 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:41 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:41 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 55879866-201e-0033-5b1c-1cb167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155241Z-17db6f7c8cfcrfgzd01a8emnyg00000002h000000000d4h5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:41 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	56493	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:41 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:41 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:41 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 92873adb-b01e-003e-0957-1c8e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155241Z-17db6f7c8cfjxfnba42c5rukwg00000001zg00000000e5mb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:41 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	56495	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:41 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:41 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:41 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 94304cac-901e-0048-809f-1bb800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155241Z-17db6f7c8cfjxfnba42c5rukwg0000000220000000008r4n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:41 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	56496	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:41 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:42 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:41 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: a5b27f46-b01e-003d-5a47-1cd32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155241Z-17db6f7c8cfcrfgzd01a8emnyg00000002qg000000001ycq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:42 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	56497	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:41 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:42 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:41 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 6fc17292-101e-0034-6b4a-1c96ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155241Z-17db6f7c8cfqxt4wrzg7st2fm8000000054g00000000c548 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:42 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	56498	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:41 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:42 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:42 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: b59689ad-601e-005c-3fe1-1af06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155242Z-17db6f7c8cfqkqk8bn4ck6f72000000004wg000000006qxr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:42 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	56499	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:42 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:42 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:42 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 6ca0adc2-b01e-0021-19e3-1acab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155242Z-17db6f7c8cfbr2wt66emzt78g400000004pg000000005qz3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:42 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	56500	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:42 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:42 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:42 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 5007ca28-801e-00a0-7d20-1b2196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155242Z-17db6f7c8cfp6mfve0htepzbps00000004hg000000005x26 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:42 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	56501	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:42 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:42 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:42 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 3776c2af-901e-0048-1a6f-1cb800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155242Z-17db6f7c8cfmhggkx889x958tc000000026g00000000e1q0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:42 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	56502	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:42 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:42 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:42 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 7708100b-601e-003e-5be1-1a3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155242Z-17db6f7c8cf8rgvlb86c9c0098000000036g000000007vt3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:42 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	56503	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:42 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:42 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:42 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 6ec52d65-901e-0083-299c-1bbb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155242Z-17db6f7c8cf96l6t7bwyfgbkhw000000047g0000000004hb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:42 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	56504	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:42 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:42 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:42 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 1507c9f1-d01e-007a-72eb-1af38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155242Z-17db6f7c8cf9wwz8ehu7c5p33g000000028000000000f8xg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:42 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	56506	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:43 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:43 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:43 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: c832ddd9-b01e-0084-55ca-1ad736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155243Z-17db6f7c8cfqxt4wrzg7st2fm8000000053g00000000exqm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:43 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	56507	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:43 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:43 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:43 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 1375d82d-b01e-0084-53a9-1cd736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155243Z-17db6f7c8cfjxfnba42c5rukwg000000025g000000001z4v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:43 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	56508	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:43 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:43 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:43 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 69483ed4-001e-0034-56df-1add04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155243Z-17db6f7c8cfvzwz27u5rnq9kpc00000005b000000000bhmu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:43 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	56509	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:43 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:43 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:43 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 4ea1e91c-d01e-0066-2741-1cea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155243Z-17db6f7c8cffhvbz3mt0ydz7x400000003c0000000002vt8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:43 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	56510	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:43 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:43 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:43 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: b025ed5a-501e-0047-1811-1cce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155243Z-17db6f7c8cfvq8pt2ak3arkg6n0000000340000000005n73 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:43 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	56511	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:44 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:44 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:44 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 49fa3939-001e-0017-20cd-1a0c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155244Z-17db6f7c8cf6qp7g7r97wxgbqc00000004dg000000009c4q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:44 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	56512	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:44 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:44 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:44 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 421ec19d-901e-002a-55e6-1c7a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155244Z-17db6f7c8cfhzb2znbk0zyvf6n00000004rg00000000azuy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:44 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	56513	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:44 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:44 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:44 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 7c051060-401e-008c-630d-1c86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155244Z-17db6f7c8cfvtw4hh2496wp8p800000003g0000000009s7n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:44 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	56514	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:44 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:44 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:44 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: e9bc8845-c01e-008d-06d9-1a2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155244Z-17db6f7c8cf96l6t7bwyfgbkhw0000000450000000005u9s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:44 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	56515	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:44 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:44 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:44 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: eba22146-701e-0021-1f31-1c3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155244Z-17db6f7c8cfcrfgzd01a8emnyg00000002fg00000000f0sf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:44 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	56516	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:44 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:44 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:44 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 72dafb48-001e-0079-44ea-1a12e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155244Z-17db6f7c8cfspvtq2pgqb2w5k000000004w000000000eu4t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:44 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	56517	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:45 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:45 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:45 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: b2260943-f01e-0052-0b1c-1c9224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155245Z-17db6f7c8cfvtw4hh2496wp8p800000003g0000000009s8d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:45 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	56518	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:45 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:45 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:45 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 95529de3-401e-0064-4a25-1b54af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155245Z-17db6f7c8cfspvtq2pgqb2w5k000000004x000000000dbmn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:45 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	56519	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:45 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:45 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:45 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 25ce0d99-d01e-008e-49a9-1c387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155245Z-17db6f7c8cfmhggkx889x958tc000000028000000000a9ur x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:45 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	56520	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:45 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:45 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:45 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 36e78a2e-101e-008d-054a-1c92e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155245Z-17db6f7c8cffhvbz3mt0ydz7x4000000038g00000000b2yg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:45 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	56521	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:45 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:45 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:45 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 4508f1f3-f01e-0096-78e2-1a10ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155245Z-17db6f7c8cfspvtq2pgqb2w5k0000000052g000000001bnp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:45 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	56522	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:45 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:45 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:45 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 77f86656-001e-000b-08e7-1a15a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155245Z-17db6f7c8cfvzwz27u5rnq9kpc000000059000000000f9sn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:45 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	56523	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:45 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:45 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:45 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: d280ac0f-001e-0079-3c69-1c12e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155245Z-17db6f7c8cf9c22xp43k2gbqvn00000002sg000000007d76 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:45 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	56524	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:45 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:45 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:45 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: cbabfe0b-601e-00ab-0220-1c66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155245Z-17db6f7c8cfpm9w8b1ybgtytds00000002z000000000chve x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:45 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	56525	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:45 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:46 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:46 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 1a8c6729-d01e-0014-7547-1ced58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155246Z-17db6f7c8cfp6mfve0htepzbps00000004h0000000006cpc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:46 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	56526	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:46 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:46 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:46 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: b9724e67-901e-00ac-7bd7-1ab69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155246Z-17db6f7c8cfvzwz27u5rnq9kpc00000005cg000000009x8b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:46 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	56527	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:46 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:46 UTC	498	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:46 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: b1a2561e-f01e-0099-0f65-1d9171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155246Z-17db6f7c8cf5mtxmr1c51513n000000005c0000000002t1z x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-13 15:52:46 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	56529	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:46 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:46 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:46 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 90f8132d-901e-002a-0d47-1c7a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155246Z-17db6f7c8cfjxfnba42c5rukwg00000002600000000005c8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:46 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	56528	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:46 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:46 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:46 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 150221b2-d01e-007a-13e9-1af38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155246Z-17db6f7c8cfq2j6f03aq9y8dns000000046000000000edvw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:46 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	56530	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:46 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:46 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:46 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 8f8e431e-b01e-0097-6fac-1b4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155246Z-17db6f7c8cf9wwz8ehu7c5p33g00000002ag00000000b74x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:46 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	56532	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:47 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:47 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:47 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: f1a7bbb3-001e-00a2-248a-1bd4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155247Z-17db6f7c8cfhrxld7punfw920n00000003w0000000006pez x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:47 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	56533	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:47 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:47 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:47 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: c9088ac8-401e-0015-21a8-1c0e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155247Z-17db6f7c8cf9wwz8ehu7c5p33g000000029000000000e7e8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:47 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	56531	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:47 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:47 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:47 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: ebcfca05-e01e-0051-5418-1c84b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155247Z-17db6f7c8cf8rgvlb86c9c009800000003a0000000001e4h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:47 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	56534	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:47 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:47 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:47 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 9aad704f-d01e-0049-789c-1be7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155247Z-17db6f7c8cfvtw4hh2496wp8p800000003n00000000020zz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:47 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	56535	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:47 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:47 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:47 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: a7f26d5f-201e-0096-3308-1cace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155247Z-17db6f7c8cfvtw4hh2496wp8p800000003k0000000006khg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:47 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	56540	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:48 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:48 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:48 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: cda1fd3a-301e-0096-2fde-1ae71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155248Z-17db6f7c8cfbr2wt66emzt78g400000004s0000000000nbv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:48 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	56537	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:48 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:48 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:48 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 0dbfe92b-d01e-0082-7aa8-1ce489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155248Z-17db6f7c8cfjxfnba42c5rukwg000000022g0000000081w4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:48 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	56539	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:48 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:48 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:48 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: d2b2f6f8-f01e-0085-0622-1c88ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155248Z-17db6f7c8cfcrfgzd01a8emnyg00000002p0000000005h48 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:48 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	56538	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:48 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:48 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:48 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: a84dc0aa-d01e-002b-1b83-1b25fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155248Z-17db6f7c8cfwtn5x6ye8p8q9m000000003qg000000006tf9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:48 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	56541	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:48 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:48 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:48 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 9542a535-401e-0064-601f-1b54af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155248Z-17db6f7c8cf6qp7g7r97wxgbqc00000004hg0000000009ym x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:48 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	56544	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:49 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:49 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:49 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: a0500a35-c01e-002b-5eef-1a6e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155249Z-17db6f7c8cfhzb2znbk0zyvf6n00000004t0000000008k8r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:49 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	56542	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:49 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:49 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:49 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: beeeb270-f01e-003f-4fe2-1ad19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155249Z-17db6f7c8cfvzwz27u5rnq9kpc00000005g0000000001xnn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:49 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	56543	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:49 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:49 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:49 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 69457385-001e-0034-42de-1add04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155249Z-17db6f7c8cfbr2wt66emzt78g400000004ng00000000855p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:49 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	56546	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:49 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:49 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:49 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: eb876971-601e-0001-084f-1cfaeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155249Z-17db6f7c8cf9c22xp43k2gbqvn00000002tg0000000040z2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:49 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	56545	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:49 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:49 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:49 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: b5702fc7-501e-0047-59e6-1ace6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155249Z-17db6f7c8cf96l6t7bwyfgbkhw000000043000000000a1ef x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:49 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	56547	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:49 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:49 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:49 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 7d3f2e15-101e-00a2-5aca-1a9f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155249Z-17db6f7c8cf5mtxmr1c51513n0000000058000000000b1ty x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:49 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	56549	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:49 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:49 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:49 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 103aeaae-201e-0051-661c-1c7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155249Z-17db6f7c8cfvtw4hh2496wp8p800000003hg000000006nze x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:49 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	56548	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:49 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:49 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:49 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 0588c624-801e-0048-72e0-1af3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155249Z-17db6f7c8cfnqpbkckdefmqa44000000051000000000d3eu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:49 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	56550	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:49 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:50 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:49 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 38d12744-701e-0050-7297-1b6767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155249Z-17db6f7c8cfvq8pt2ak3arkg6n000000032g000000009aek x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:50 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	56551	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:49 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:50 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:49 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 9ad66ff1-501e-00a0-38ec-1a9d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155249Z-17db6f7c8cf5mtxmr1c51513n0000000058000000000b1u3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:50 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	56552	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:50 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:50 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:50 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 745077d4-d01e-0082-7c4a-1ce489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155250Z-17db6f7c8cfmhggkx889x958tc000000027000000000c3pk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:50 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	56553	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:50 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:50 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:50 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 1a8c6bd5-d01e-0014-0747-1ced58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155250Z-17db6f7c8cfcl4jvqfdxaxz9w800000002g00000000082af x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:50 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	56554	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:50 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:50 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:50 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: f76b9983-801e-0047-0eec-1a7265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155250Z-17db6f7c8cf6qp7g7r97wxgbqc00000004ag00000000etm6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:50 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	56555	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:50 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:50 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:50 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 8957210b-901e-005b-0df7-1a2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155250Z-17db6f7c8cfqxt4wrzg7st2fm800000005a00000000018te x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:50 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	56556	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:50 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:50 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:50 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 2eee43c6-d01e-0066-0203-1bea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155250Z-17db6f7c8cfp6mfve0htepzbps00000004fg00000000a5cs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:50 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	56557	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:51 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:51 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:51 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: c154ba59-a01e-0070-01d7-1a573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155251Z-17db6f7c8cfq2j6f03aq9y8dns000000048000000000b0aa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:51 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	56559	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:51 UTC	191	OUT	GET /rules/rule90401v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:51 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:51 GMT Content-Type: text/xml Content-Length: 1250 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE4487AA" x-ms-request-id: 9a7d960e-501e-00a0-6dcd-1a9d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155251Z-17db6f7c8cfq2j6f03aq9y8dns000000045g00000000evzh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:51 UTC	1250	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 39 30 34 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 53 61 6d 70 6c 69 6e 67 50 6f 6c 69 63 79 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 4d 65 74 61 64 61 74 61 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="90401" V="3" DC="ESM" EN="Office.Telemetry.SamplingPolicy" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" DL="A" DCa="PSP PSU" xmlns=""> <RIS> <RI N="Metadata" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	56558	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:51 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:51 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:51 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 46e4659a-701e-000d-2947-1c6de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155251Z-17db6f7c8cfvq8pt2ak3arkg6n000000036g0000000002u4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:51 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	56560	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:51 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:51 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:51 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 4dc67717-001e-005a-3747-1cc3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155251Z-17db6f7c8cfjxfnba42c5rukwg00000001z000000000fp94 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:51 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	56561	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:51 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:51 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:51 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: defb5908-e01e-0033-2de2-1a4695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155251Z-17db6f7c8cfhrxld7punfw920n00000003xg0000000032nz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:51 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	56562	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:52 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:52 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:52 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 7d81a33d-101e-00a2-42e1-1a9f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155252Z-17db6f7c8cfspvtq2pgqb2w5k000000004wg00000000eceq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:52 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	56564	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:52 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:52 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:52 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 07f85e87-a01e-003d-78df-1a98d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155252Z-17db6f7c8cf5mtxmr1c51513n0000000058000000000b1wt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:52 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	56563	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:52 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:52 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:52 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 07ebf894-801e-008c-19d8-1a7130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155252Z-17db6f7c8cf6qp7g7r97wxgbqc00000004a000000000fdne x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:52 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	56565	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:52 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:52 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:52 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: d1236033-501e-008f-33ea-1a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155252Z-17db6f7c8cfqxt4wrzg7st2fm8000000059g000000002f2e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:52 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	56566	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:52 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:52 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:52 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: e6504dd7-401e-0015-6cce-1a0e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155252Z-17db6f7c8cfhzb2znbk0zyvf6n00000004rg00000000b03w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:52 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	56567	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:52 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:52 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:52 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: f0eac77b-f01e-00aa-541b-1c8521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155252Z-17db6f7c8cf4g2pjavqhm24vp400000005b0000000006748 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:52 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	56568	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:52 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:53 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:53 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 0b054cf6-001e-00a2-745b-1cd4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155253Z-17db6f7c8cfvq8pt2ak3arkg6n000000036g0000000002vm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:53 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	56569	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:52 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:53 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:53 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 745fe90a-101e-005a-7f69-1c882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155253Z-17db6f7c8cf9c22xp43k2gbqvn00000002u00000000031tw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:53 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	56570	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:52 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:53 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:53 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: efbad5a3-301e-0000-2ec0-1aeecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155253Z-17db6f7c8cfhzb2znbk0zyvf6n00000004v0000000004m94 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:53 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	56571	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:53 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:53 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:53 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 37770a76-901e-0048-046f-1cb800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155253Z-17db6f7c8cfcrfgzd01a8emnyg00000002p0000000005h7s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:53 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	56572	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:53 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:53 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:53 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 234b0266-801e-0035-5da3-1b752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155253Z-17db6f7c8cf96l6t7bwyfgbkhw000000042g00000000b1v3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:53 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	56575	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:53 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:53 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:53 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: e2d37e80-101e-0079-6257-1c5913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155253Z-17db6f7c8cfcrfgzd01a8emnyg00000002g000000000e6nm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:53 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	56573	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:53 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:53 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:53 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: c0002b7f-501e-0029-6e1c-1cd0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155253Z-17db6f7c8cfjxfnba42c5rukwg000000020000000000cqnv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:53 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	56574	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:53 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:53 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:53 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: fe1a38a0-a01e-0053-6ad8-1a8603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155253Z-17db6f7c8cfqkqk8bn4ck6f72000000004s000000000fwtd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:53 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	56576	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:53 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:53 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:53 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 1433b7fe-d01e-0017-55d8-1ab035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155253Z-17db6f7c8cfqxt4wrzg7st2fm8000000056000000000akrq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:53 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	56577	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:54 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:54 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:54 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 44110a29-201e-00aa-4c81-1a3928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155254Z-17db6f7c8cfhzb2znbk0zyvf6n00000004q000000000dp44 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:54 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	56578	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:54 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:54 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:54 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: fa68fd7e-e01e-0099-0ae2-1ada8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155254Z-17db6f7c8cfp6mfve0htepzbps00000004cg00000000g6km x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:54 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	56580	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:54 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:54 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:54 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: cec5e4df-e01e-001f-1c47-1c1633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155254Z-17db6f7c8cffhvbz3mt0ydz7x4000000038g00000000b3e3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:54 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	56581	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:54 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:54 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:54 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: d113afee-501e-008f-14e4-1a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155254Z-17db6f7c8cfgqlr45m385mnngs00000003pg0000000073kr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:54 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	56582	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:55 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:55 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:55 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: b9db8c53-a01e-0002-5a69-1c5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155255Z-17db6f7c8cfjxfnba42c5rukwg000000021000000000ak4t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:55 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	56583	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:55 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:55 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:55 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: f4458a97-001e-0028-604a-1cc49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155255Z-17db6f7c8cffhvbz3mt0ydz7x400000003ag0000000066kx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:55 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	56584	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:55 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:55 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:55 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: a032a6e1-c01e-002b-15e5-1a6e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155255Z-17db6f7c8cfspvtq2pgqb2w5k0000000050g000000006k4c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:55 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	56585	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:56 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:56 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:56 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 16892f44-001e-008d-0d14-1cd91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155256Z-17db6f7c8cf5mtxmr1c51513n000000005b0000000004nga x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:56 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	56587	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:56 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:56 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:56 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 7ee78019-a01e-0002-6d9c-1b5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155256Z-17db6f7c8cfwtn5x6ye8p8q9m000000003k000000000gab8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:56 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	56588	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:56 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:57 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:56 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 1c06004d-d01e-005a-0ee5-1a7fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155256Z-17db6f7c8cf96l6t7bwyfgbkhw000000045g000000004n95 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:57 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	56579	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:58 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:58 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:58 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 4ec19421-301e-006e-0147-1cf018000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155258Z-17db6f7c8cf9wwz8ehu7c5p33g00000002bg00000000a4bc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:58 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	56590	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:58 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:58 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:58 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 8e2f4d00-001e-000b-08a9-1c15a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155258Z-17db6f7c8cfgqlr45m385mnngs00000003sg000000000r0x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:58 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	56589	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:58 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:58 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:58 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 6411c5a0-901e-0083-0ae3-1abb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155258Z-17db6f7c8cfspvtq2pgqb2w5k000000004yg00000000aqw3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:58 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	56591	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:58 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:58 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:58 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 0d61edcd-501e-0064-4ca2-1c1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155258Z-17db6f7c8cfjxfnba42c5rukwg00000001z000000000fpgh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:58 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	56594	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:58 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:59 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:58 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 03a639d1-101e-008d-40f2-1a92e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155258Z-17db6f7c8cfvzwz27u5rnq9kpc00000005g0000000001xzc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:59 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	56593	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:58 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:59 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:58 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 0506fa48-b01e-001e-4cc1-1a0214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155258Z-17db6f7c8cfqxt4wrzg7st2fm8000000056000000000akyt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:59 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	56586	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:58 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:59 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:58 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 47bad248-d01e-0014-2e9c-1bed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155258Z-17db6f7c8cfhrxld7punfw920n00000003v00000000091nd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:59 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	56592	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:58 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:59 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:58 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 0c263a70-701e-0098-1b5d-1c395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155258Z-17db6f7c8cfcl4jvqfdxaxz9w800000002d000000000cquw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:59 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	56595	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:59 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:52:59 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:59 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: db50f49a-301e-000c-213b-1c323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155259Z-17db6f7c8cf9wwz8ehu7c5p33g00000002fg000000000wwr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:52:59 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	56596	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:59 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:53:00 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:59 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 5e87ffe3-901e-00ac-4e18-1cb69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155259Z-17db6f7c8cfvtw4hh2496wp8p800000003fg00000000bk5a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:53:00 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	56597	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:59 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:53:00 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:59 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 1000688e-201e-0051-7e07-1c7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155259Z-17db6f7c8cfvtw4hh2496wp8p800000003hg000000006pck x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:53:00 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	56598	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:52:59 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:53:00 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:52:59 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 0d065d93-f01e-0096-29a3-1b10ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155259Z-17db6f7c8cfgqlr45m385mnngs00000003hg00000000g3b6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:53:00 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	56599	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:53:00 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:53:00 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:53:00 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: ecb94678-501e-0035-51d8-1ac923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155300Z-17db6f7c8cfqkqk8bn4ck6f72000000004y0000000003duq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:53:00 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	56600	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:53:00 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:53:00 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:53:00 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: e28c1875-001e-00ad-40e2-1a554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155300Z-17db6f7c8cfhzb2znbk0zyvf6n00000004qg00000000dkz6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:53:00 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	56602	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:53:00 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:53:00 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:53:00 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: b5dfe12a-901e-008f-1362-1c67a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155300Z-17db6f7c8cfjxfnba42c5rukwg000000024g000000003qq3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:53:00 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	56601	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:53:00 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:53:00 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:53:00 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 83ee3589-001e-00ad-137e-1b554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155300Z-17db6f7c8cfwtn5x6ye8p8q9m000000003q000000000797m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:53:00 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	56603	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:53:00 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:53:00 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:53:00 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: b9726785-901e-00ac-76d7-1ab69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155300Z-17db6f7c8cfbr2wt66emzt78g400000004mg000000009x0f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:53:00 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	56604	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:53:00 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:53:00 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:53:00 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: b0bf752c-501e-0047-5047-1cce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155300Z-17db6f7c8cfvtw4hh2496wp8p800000003f000000000cbp8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:53:00 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	56605	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:53:01 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:53:01 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:53:01 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 374dd3c9-a01e-006f-2dec-1a13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155301Z-17db6f7c8cfbr2wt66emzt78g400000004k000000000dbsb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:53:01 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	56606	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:53:01 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:53:01 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:53:01 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: f766e345-d01e-0014-78e6-1aed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155301Z-17db6f7c8cf96l6t7bwyfgbkhw0000000460000000003y23 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:53:01 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	56608	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:53:01 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:53:01 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:53:01 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: b05a7aca-501e-0047-5422-1cce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155301Z-17db6f7c8cf8rgvlb86c9c0098000000034g00000000cvfs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:53:01 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	56607	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:53:01 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:53:01 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:53:01 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 63590950-201e-0085-2bd8-1a34e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155301Z-17db6f7c8cfwtn5x6ye8p8q9m000000003ng00000000ap3b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:53:01 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	56609	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:53:01 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:53:01 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:53:01 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 1739cac3-801e-0067-0a1c-1cfe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155301Z-17db6f7c8cfvq8pt2ak3arkg6n000000032000000000a1e6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:53:01 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	56610	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:53:01 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:53:01 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:53:01 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: 1726acf1-801e-0083-09f0-1af0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155301Z-17db6f7c8cf5mtxmr1c51513n000000005d0000000000ey9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:53:01 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	56611	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:53:02 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:53:02 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:53:02 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: 7843ce7c-701e-0053-331e-1b3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155302Z-17db6f7c8cfnqpbkckdefmqa44000000054g000000006wyx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:53:02 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	56612	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:53:02 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:53:02 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:53:02 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: 25f59169-c01e-0046-7a20-1c2db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155302Z-17db6f7c8cfvq8pt2ak3arkg6n000000030000000000ds9z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:53:02 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	56613	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:53:02 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:53:02 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:53:02 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: d178e097-d01e-005a-72ac-1b7fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155302Z-17db6f7c8cfq2j6f03aq9y8dns000000047000000000d9ct x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:53:02 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	56614	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:53:02 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:53:02 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:53:02 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: 0a20bae4-d01e-005a-49d9-1a7fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155302Z-17db6f7c8cfp6mfve0htepzbps00000004d000000000ebq5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:53:02 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	56615	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:53:02 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:53:02 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:53:02 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: 6a7281b4-d01e-008e-2ea3-1b387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155302Z-17db6f7c8cf6qp7g7r97wxgbqc00000004a000000000fdx9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:53:02 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	56616	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:53:02 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:53:03 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:53:03 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: 83695c77-e01e-001f-80c4-1a1633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155302Z-17db6f7c8cfp6mfve0htepzbps00000004k0000000005n58 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:53:03 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	56617	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:53:03 UTC	192	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:53:03 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:53:03 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: 94230e0f-f01e-0003-2847-1c4453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155303Z-17db6f7c8cffhvbz3mt0ydz7x400000003cg000000001h7x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:53:03 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	56618	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:53:03 UTC	192	OUT	GET /rules/rule700900v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:53:03 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:53:03 GMT Content-Type: text/xml Content-Length: 1371 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:06 GMT ETag: "0x8DC582BED3D048D" x-ms-request-id: 53a35867-601e-0002-7e63-1ca786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155303Z-17db6f7c8cffhvbz3mt0ydz7x400000003b00000000050d2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:53:03 UTC	1371	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6f 66 69 6e 67 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700900" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProofing" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	56619	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 15:53:03 UTC	192	OUT	GET /rules/rule702251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 15:53:03 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 15:53:03 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F427E7" x-ms-request-id: fd9deda9-001e-0079-391f-1c12e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T155303Z-17db6f7c8cf9c22xp43k2gbqvn00000002pg00000000bx3x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 15:53:03 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 3740, Parent PID: 600

General

Target ID:	0
Start time:	11:51:36
Start date:	13/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 2032, Parent PID: 3740

General

Target ID:	2
Start time:	11:51:41
Start date:	13/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2264 --field-trial-handle=2216,i,12730649350140849657,17270425858010476698,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6388, Parent PID: 600

General

Target ID:	3
Start time:	11:51:43
Start date:	13/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://mail.findmy-ld.help/icloud-archivos/code2022esp.php"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://mail.findmy-ld.help/icloud-archivos/code2022esp.php

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 47

Chrome Cache Entry: 48

Chrome Cache Entry: 49

Chrome Cache Entry: 50

Chrome Cache Entry: 51

Chrome Cache Entry: 52

Chrome Cache Entry: 53

Chrome Cache Entry: 54

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Static File Info

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTP Packets

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

Windows Analysis Report
http://mail.findmy-ld.help/icloud-archivos/code2022esp.php