Edit tour

Windows Analysis Report
https://ijazkhan09.github.io/facebook_login_page

Overview

General Information

Sample URL:	https://ijazkhan09.github.io/facebook_login_page
Analysis ID:	1532589
Tags:	openphish
Infos:

Detection

HTMLPhisher

Score:	76
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Misleading page title found

Yara detected HtmlPhish64

Phishing site detected (based on logo match)

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6036 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1368 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=2224,i,15737961466895962115,16571030443050912340,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6352 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ijazkhan09.github.io/facebook_login_page" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
0.0.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security
1.1.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security

HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 9115Server: GitHub.comContent-Type: text/html; charset=utf-8permissions-policy: interest-cohort=()ETag: "66faf066-239b"Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'X-GitHub-Request-Id: 5A09:3B9574:2AF70F3:2F4D90E:670BEF65Accept-Ranges: bytesAge: 0Date: Sun, 13 Oct 2024 16:03:51 GMTVia: 1.1 varnishX-Served-By: cache-ewr-kewr1740039-EWRX-Cache: MISSX-Cache-Hits: 0X-Timer: S1728835431.241758,VS0,VE18Vary: Accept-EncodingX-Fastly-Request-ID: 91e82e130017cdbeb43a355439328da4588e803b

Source: chromecache_42.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Roboto:wght
Source: chromecache_46.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxEIzIFKw.woff2)
Source: chromecache_46.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxFIzIFKw.woff2)
Source: chromecache_46.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxGIzIFKw.woff2)
Source: chromecache_46.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxHIzIFKw.woff2)
Source: chromecache_46.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxIIzI.woff2)
Source: chromecache_46.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxLIzIFKw.woff2)
Source: chromecache_46.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxMIzIFKw.woff2)
Source: chromecache_46.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)
Source: chromecache_46.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)
Source: chromecache_46.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBxc4EsA.woff2)
Source: chromecache_46.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)
Source: chromecache_46.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)
Source: chromecache_46.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)
Source: chromecache_46.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)
Source: chromecache_46.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2)
Source: chromecache_46.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fBBc4.woff2)
Source: chromecache_46.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2)
Source: chromecache_46.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2)
Source: chromecache_46.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2)
Source: chromecache_46.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fChc4EsA.woff2)
Source: chromecache_46.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCxc4EsA.woff2)
Source: chromecache_46.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_46.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_46.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_46.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_46.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_46.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_46.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_46.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfABc4EsA.woff2)
Source: chromecache_46.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfBBc4.woff2)
Source: chromecache_46.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2)
Source: chromecache_46.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfCBc4EsA.woff2)
Source: chromecache_46.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfCRc4EsA.woff2)
Source: chromecache_46.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfChc4EsA.woff2)
Source: chromecache_46.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfCxc4EsA.woff2)
Source: chromecache_46.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_46.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_46.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_46.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_46.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_46.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_46.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_49.2.dr	String found in binary or memory: https://githubstatus.com
Source: chromecache_49.2.dr	String found in binary or memory: https://help.github.com/pages/
Source: chromecache_49.2.dr	String found in binary or memory: https://twitter.com/githubstatus

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49827 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49912 version: TLS 1.2

Source: classification engine

Classification label: mal76.phis.win@16/19@6/6

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=2224,i,15737961466895962115,16571030443050912340,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ijazkhan09.github.io/facebook_login_page"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=2224,i,15737961466895962115,16571030443050912340,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://ijazkhan09.github.io/facebook_login_page	4%	Virustotal		Browse
https://ijazkhan09.github.io/facebook_login_page	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Link
www.google.com	0%	Virustotal	Browse
s-part-0017.t-0009.t-msedge.net	0%	Virustotal	Browse
fp2e7a.wpc.phicdn.net	0%	Virustotal	Browse
default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label	Link
https://githubstatus.com	0%	URL Reputation	safe
https://help.github.com/pages/	0%	URL Reputation	safe
https://twitter.com/githubstatus	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
ijazkhan09.github.io	185.199.109.153	true	true		unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	0%, Virustotal, Browse	unknown
www.google.com	142.250.185.132	true	false	0%, Virustotal, Browse	unknown
default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	84.201.210.18	true	false	0%, Virustotal, Browse	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	0%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Reputation
https://ijazkhan09.github.io/facebook_login_page/images/infofacebook.svg	true	unknown
https://ijazkhan09.github.io/favicon.ico	false	unknown
https://ijazkhan09.github.io/facebook_login_page/?	true	unknown
https://ijazkhan09.github.io/facebook_login_page	true	unknown
https://ijazkhan09.github.io/facebook_login_page/	true	unknown
https://ijazkhan09.github.io/facebook_login_page/style.css	true	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://githubstatus.com	chromecache_49.2.dr	false	URL Reputation: safe	unknown
https://help.github.com/pages/	chromecache_49.2.dr	false	URL Reputation: safe	unknown
https://twitter.com/githubstatus	chromecache_49.2.dr	false	0%, Virustotal, Browse	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.132	www.google.com	United States	15169	GOOGLEUS	false
185.199.109.153	ijazkhan09.github.io	Netherlands	54113	FASTLYUS	true
239.255.255.250	unknown	Reserved	unknown	unknown	false
185.199.108.153	unknown	Netherlands	54113	FASTLYUS	false

Private

IP
192.168.2.4
192.168.2.6

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1532589
Start date and time:	2024-10-13 18:02:53 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 11s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://ijazkhan09.github.io/facebook_login_page
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal76.phis.win@16/19@6/6
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.18.99, 142.250.185.238, 74.125.133.84, 34.104.35.123, 142.250.186.170, 142.250.186.74, 216.58.206.74, 142.250.186.138, 142.250.186.42, 216.58.212.170, 172.217.16.202, 142.250.185.170, 142.250.184.202, 172.217.18.10, 216.58.206.42, 142.250.185.106, 142.250.181.234, 142.250.184.234, 142.250.185.234, 142.250.186.106, 172.217.18.3, 20.12.23.50, 88.221.110.91, 2.16.100.168, 192.229.221.95, 93.184.221.240, 40.69.42.241, 20.242.39.171, 142.250.185.195
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, otelrules.afd.azureedge.net, clientservices.googleapis.com, a767.dspw65.akamai.net, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, ocsp.edge.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, wu.ec.azureedge.net, ctldl.windowsupdate.com, download.windowsupdate.com.edgesuite.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Input	Output
URL: https://ijazkhan09.github.io/facebook_login_page/ Model: gemini-1.5-flash	{ "text": "facebook Facebook Helps You Connect And Share With The People In Your Life. Email Address Or Phone Number Password Login Forget Password ? Create New Account Create A Page For A Celebrity, Brand Or Business.", "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Login", "text_input_field_labels": ["Email Address Or Phone Number", "Password"], "pdf_icon_visible": false, "has_visible_qrcode": false, "has_visible_captcha": false, "has_urgent_text": false}

URL: https://ijazkhan09.github.io/facebook_login_page/ Model: jbxai	{ "brands":["Facebook"], "text":"Facebook Helps You Connect And Share With The People In Your Life.", "contains_trigger_text":true, "trigger_text":"Facebook Helps You Connect And Share With The People In Your Life.", "prominent_button_name":"Login", "text_input_field_labels":["Email Address Or Phone Number", "Password"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://ijazkhan09.github.io/facebook_login_page/ Model: gemini-1.5-flash	{ "brands": "Facebook"}
	{ "brands": "Facebook"}
URL: https://ijazkhan09.github.io/facebook_login_page/? Model: gemini-1.5-flash	{ "text": "facebook Facebook Helps You Connect And Share With The People In Your Life. Email Address Or Phone Number Password Login Forget Password ? Creat New Account Create A Page For A Celebrity, Brand Or Business.", "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Login", "text_input_field_labels": ["Email Address Or Phone Number", "Password"], "pdf_icon_visible": false, "has_visible_qrcode": false, "has_visible_captcha": false, "has_urgent_text": false}

URL: https://ijazkhan09.github.io/facebook_login_page/? Model: jbxai	{ "brands":["Facebook"], "text":"Facebook Helps You Connect And Share With The People In Your Life.", "contains_trigger_text":true, "trigger_text":"Facebook Helps You Connect And Share With The People In Your Life.", "prominent_button_name":"Login", "text_input_field_labels":["Email Address Or Phone Number", "Password"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://ijazkhan09.github.io/facebook_login_page/ Model: jbxai	{ "phishing_score":9, "brands":"Facebook", "legit_domain":"facebook.com", "classification":"wellknown", "reasons":["The brand 'Facebook' is a well-known social media platform with a legitimate domain of 'facebook.com'.", "The URL 'ijazkhan09.github.io' does not match the legitimate domain of Facebook.", "The URL is hosted on GitHub Pages, which is a common platform for hosting personal or project pages, not official brand pages.", "The presence of input fields for 'Email Address Or Phone Number' is typical for phishing attempts targeting Facebook credentials.", "The URL does not contain any direct association with Facebook, indicating a potential phishing attempt."], "brand_matches":[false], "url_match":false, "brand_input":"Facebook", "input_fields":"Email Address Or Phone Number"}

URL: https://ijazkhan09.github.io/facebook_login_page/? Model: gemini-1.5-flash	{ "brands": "Facebook"}
	{ "brands": "Facebook"}
URL: https://ijazkhan09.github.io/facebook_login_page/? Model: jbxai	{ "phishing_score":9, "brands":"Facebook", "legit_domain":"facebook.com", "classification":"wellknown", "reasons":["The brand 'Facebook' is a well-known social media platform with a legitimate domain of 'facebook.com'.", "The URL 'ijazkhan09.github.io' does not match the legitimate domain of Facebook.", "The URL is hosted on GitHub Pages, which is a common platform for hosting personal or project pages, not official brand pages.", "The presence of input fields for 'Email Address Or Phone Number' is suspicious as it mimics Facebook's login page, which is a common phishing tactic.", "The domain 'github.io' is not associated with Facebook, indicating a potential phishing attempt."], "brand_matches":[false], "url_match":false, "brand_input":"Facebook", "input_fields":"Email Address Or Phone Number"}

URL: https://ijazkhan09.github.io/facebook_login_page/ Model: gemini-1.5-pro-002	{ "legit_domain": "unknown", "classification": "unknown", "reasons": ["The domain \"ijazkhan09.github.io\" is a personal GitHub page, which is not typically associated with a brand or business.", "The input fields 'Email Address Or Phone Number' and 'Password' are generic and could be used for legitimate or malicious purposes.", "Without more context about the specific content and purpose of the webpage, it is difficult to definitively assess its legitimacy.", "The given brand 'F' is too ambiguous to provide any relevant information."], "riskscore": 6}
URL: ijazkhan09.github.io Brands: F Input Fields: Email Address Or Phone Number, Password

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18536, version 1.0
Category:	downloaded
Size (bytes):	18536
Entropy (8bit):	7.986571198050597
Encrypted:	false
SSDEEP:	384:IhocXmE6eM871P7td/mcOKA454H2orQEONKrOqxw:f6WeL1P//9D54WCCKc
MD5:	8EFF0B8045FD1959E117F85654AE7770
SHA1:	227FEE13CEB7C410B5C0BB8000258B6643CB6255
SHA-256:	89978E658E840B927DDDB5CB3A835C7D8526ECE79933BD9F3096B301FE1A8571
SHA-512:	2E4FB65CAAB06F02E341E9BA4FB217D682338881DABA3518A0DF8DF724E0496E1AF613DB8E2F65B42B9E82703BA58916B5F5ABB68C807C78A88577030A6C2058
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......Hh..........H..............................Z..\|.`..J.T..<.....H..U..Z...x.6.$..0. ..t. ..I....p.0.VU.......1....AQ...d..x.....R..4.-.c..C$fUc.c..IX..@..~g.xs.....%...O...eJ.w..U.\|.......%..{.......U+..T#.S......`.n.....V.w.4..~P"..zk.%..../........=3...F.........V.FL..;Bc.........A.Uk.U1.b!Y.BH.DL...s.s...F.m.9a..GJ..1..#.`m5..DI..X5#.........B.Akm.....&..0...{.L.....G......-(.......O4.@3....=......f..l...$.....j..NO...e.Y.tJ2J>F.(.c....08..e...~....D2S7s:.G'Gm........!.7.........r.c.`,.....~.).......c>1.......Y.g2^...T-1.7./r./....>...g.ov@u.?.U.+._...'M..,.,g....!g..9."..yBF.#r+.Ps...%.d=....U...5.b.$:`.4R.II.<A....Q)....e...k.....M.8.z....+.....5}..F........F.d._...].~-](.Lf....Y..W....;-z...;. .@x._v../.%UIm....=s...P.C....G...^..Q.!g.!b._.P....at..?.}....t.z...O(..Y6..R.2.X....k.R..K.gw(.F.K?m..R...7....dj..7. .r.U..be.4......8.].w.B..B......Y..:..8.N..U...NEm...\.^q..f}.......{..6.". ...y-.Y...N.+.M E..`......R.$T

Chrome Cache Entry: 42

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2280
Entropy (8bit):	4.782948216814331
Encrypted:	false
SSDEEP:	48:TmBuviyQLflkva/e+gQF+coaQF4FUqIPjxOgKPJfh:T/iyQLtFYF4F5Ido
MD5:	8A3C65D67EE558276712C27D266A3381
SHA1:	A2454E29E93B50F8F4CE700EFF2414991F0404EB
SHA-256:	B4332C52C22CC36E0A21F579BA73EE646671B8DDB20F2D13A8149E030D37A5BA
SHA-512:	170152F7BB53343EBF59920DDD300D3460F3C6E185903BE526D07EDF360A82FA65D07CB33F30A07705227FB3116BC37181A906A56AA5BF31D0969C45136D8518
Malicious:	false
Reputation:	low
URL:	https://ijazkhan09.github.io/facebook_login_page/style.css
Preview:	@import url('https://fonts.googleapis.com/css2?family=Roboto:wght@100;300;400;500;700;900&display=swap');.{. margin: 0;. padding: 0;. list-style: none;. text-decoration: none;. text-transform: capitalize;.}.html{. scroll-behavior: smooth;. overflow-x: hidden;.}.body{. font-family: 'Roboto', sans-serif;.}..fb-section{. width: 100%;. height: 100vh;. background: #F0F2F5;.}..fb-section .container{. / border: 1px solid red; /. width: 85%;. margin: 0 auto;. padding-top: 130px;.}..fb-info{. / border: 1px solid red; /. float: left;. width: 47%;. padding: 1rem;.}..fb-info h5{. font-size: 1.6rem;. font-weight: 400;. color: black;. margin-left: 1.5rem;. margin-top: -.5rem;.}..fb-info img{. width: 320px;. / border: 1px solid red; /..}..form{. / border: 1px solid red; */. float: right;. width: 49%;. background: transparent;.}..form .main{. background: #fff;. width: 400px;. padding: 1rem;. bor

Chrome Cache Entry: 43

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1237
Entropy (8bit):	4.243475755610447
Encrypted:	false
SSDEEP:	12:hY8y7DkCMxMBaYARGhDh4VFa9csknyoJDVmt2WylD4nkZVM02/Ug1zThOLEByblM:hY8CDkCM3REDuVBdN64BOGvmdkEIJM
MD5:	DBFA6790AECF4BF08CEB84647CC66E49
SHA1:	65E217B9B432BD7E4C04634FE0D935AC3BE7A427
SHA-256:	F4DBA11C76D974D0A485F21E7D5FA02077AE94E36D07C3DBC03B9F204574A842
SHA-512:	A572AC570BA27C788ECCC9D7FE11321FF2E1E276BA282F47982E76F01E37C62968518DB0ED2C623AEE9C4D699F99955A0B4AA9505062F6B37D89359D112E1BA9
Malicious:	false
Reputation:	low
URL:	https://ijazkhan09.github.io/facebook_login_page/
Preview:	<!DOCTYPE html>.<html lang="en">..<head>. <meta charset="UTF-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <title>Facebook Login \| Page</title>. <link rel="stylesheet" href="style.css">.</head>..<body>. <section class="fb-section">. <div class="container">.. <div class="fb-info">. <img src="images/infofacebook.svg" alt="">. <h5>Facebook helps you connect and share with the people in your life.</h5>. </div>.. <form class="form">. <div class="main">. <input type="text" placeholder="email adress or phone number">. <input type="password" placeholder="password">. <button type="submit" class="login">login</button>. <div class="forget"><a href="#">forget password ?</a></div>. <hr />. <div class="creat-button"><button type="button">creat new account</bu

Chrome Cache Entry: 44

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.307354922057605
Encrypted:	false
SSDEEP:	3:WZoS+Nhn:WZoSyh
MD5:	A2432DC721D79CB02E73D270CE7E1EAA
SHA1:	5A3C7BE77E9108ACA1B39E6BCD336EAAE6A51080
SHA-256:	CE43C8C02C05A92B3E20FAB138AAD31B9FD54B92848913449D09924E839BB80E
SHA-512:	0091B8D2F943169BDF1DD01D07A31F683F3B353D4EAADF1F7973AA79A989E349F53D6518AC612A856D89AB1539923C9FFAABB13E7CF8BEDF450E128342FF3298
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwkWl8QkFKsFVBIFDZFhlU4SBQ01hlQc?alt=proto
Preview:	ChIKBw2RYZVOGgAKBw01hlQcGgA=

Chrome Cache Entry: 45

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1237
Entropy (8bit):	4.243475755610447
Encrypted:	false
SSDEEP:	12:hY8y7DkCMxMBaYARGhDh4VFa9csknyoJDVmt2WylD4nkZVM02/Ug1zThOLEByblM:hY8CDkCM3REDuVBdN64BOGvmdkEIJM
MD5:	DBFA6790AECF4BF08CEB84647CC66E49
SHA1:	65E217B9B432BD7E4C04634FE0D935AC3BE7A427
SHA-256:	F4DBA11C76D974D0A485F21E7D5FA02077AE94E36D07C3DBC03B9F204574A842
SHA-512:	A572AC570BA27C788ECCC9D7FE11321FF2E1E276BA282F47982E76F01E37C62968518DB0ED2C623AEE9C4D699F99955A0B4AA9505062F6B37D89359D112E1BA9
Malicious:	false
Reputation:	low
URL:	https://ijazkhan09.github.io/facebook_login_page/?
Preview:	<!DOCTYPE html>.<html lang="en">..<head>. <meta charset="UTF-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <title>Facebook Login \| Page</title>. <link rel="stylesheet" href="style.css">.</head>..<body>. <section class="fb-section">. <div class="container">.. <div class="fb-info">. <img src="images/infofacebook.svg" alt="">. <h5>Facebook helps you connect and share with the people in your life.</h5>. </div>.. <form class="form">. <div class="main">. <input type="text" placeholder="email adress or phone number">. <input type="password" placeholder="password">. <button type="submit" class="login">login</button>. <div class="forget"><a href="#">forget password ?</a></div>. <hr />. <div class="creat-button"><button type="button">creat new account</bu

Chrome Cache Entry: 46

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	14029
Entropy (8bit):	5.407737381316599
Encrypted:	false
SSDEEP:	384:DvwzvdvmvhevcvVvOYhKZ22EUiPA1uCrDDWmvOZAMkEVFdb0Fqz9Sn7vUzwv1M:Dvwvdvmv0vcvVvOYKZ7EUi41uaDDWQOZ
MD5:	446881ABABC91B95DAE7122A0ACD4366
SHA1:	8194FA6F1AA8375C7B4B5DD1493EF9E097564CED
SHA-256:	D9A0B2A5B4FEE4E6E2F74E8131619545972B864657C524D16A52F2618A429EEC
SHA-512:	D7D53BC29CBDBC0D614B5FE17FBBE0D1B85A2F71524B206DFC348B5D55D5764BDDC3B445E30CA5F12E07642777EB51F9502E12D5CCBDA9C3E1CA9DB62FDD6C2C
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Roboto:wght@100;300;400;500;700;900&display=swap
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 100;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxFIzIFKw.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 100;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxMIzIFKw.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 100;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxEIzIFKw.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 100;. font-display: swap;. src: url(https://fonts.gsta

Chrome Cache Entry: 47

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2549
Entropy (8bit):	4.065824216102575
Encrypted:	false
SSDEEP:	24:t4tQ6dEHu+4CE/EiFyCmxOJLGe1sxmJLOTyX3WCQ9yCmxOJLA5J2z5D6M9JMPxg0:WiE/yCmr9hj9mP0kOpFnqo7gX
MD5:	ECD94021D2C853C3B8DEB8203BA17300
SHA1:	6F0E24BAF66AE386041E8FAF42363418A4C96144
SHA-256:	0D6F8D206A6BD8B60A2048A3DF206AC956A2F633786E4AF1C02057F81758AD7A
SHA-512:	1967613484EB4FB2A50628CCED684C3E1022D1DF51D5AA86ADE53828DBDF0A748A8E99669C08EC5A9AA4BA97DC74F709AD4798BF486C1BAEEC60D24B223E5D50
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1090" height="360" fill="none" viewBox="0 0 1090 360">. <path fill="#0866FF" d="M881.583 257.897h29.48v-47.696l41.137 47.696h36.072l-47.89-54.969 40.909-47.663h-32.825l-37.403 43.93v-96.982l-29.48 3.864v151.82Zm-67.988-105.261c-32.728 0-55.455 22.013-55.455 53.929s22.727 53.929 55.455 53.929c32.727 0 55.455-22.013 55.455-53.929s-22.728-53.929-55.455-53.929Zm0 82.728c-15.163 0-25.552-11.721-25.552-28.799s10.389-28.799 25.552-28.799c15.162 0 25.552 11.721 25.552 28.799s-10.39 28.799-25.552 28.799Zm-119.807-82.728c-32.727 0-55.455 22.013-55.455 53.929s22.728 53.929 55.455 53.929c32.728 0 55.455-22.013 55.455-53.929s-22.727-53.929-55.455-53.929Zm0 82.728c-15.162 0-25.552-11.721-25.552-28.799s10.39-28.799 25.552-28.799c15.163 0 25.552 11.721 25.552 28.799s-10.389 28.799-25.552 28.799Zm-112.826-82.728c-13.636 0-24.935 5.357-32.013 15.162v-65.585l-29.513 3.831v151.82h26.169l.519-15.844c6.981 11.818 19.481 18.474 34.838 18.474 27.988 0 48.475-22.

Chrome Cache Entry: 48

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18588, version 1.0
Category:	downloaded
Size (bytes):	18588
Entropy (8bit):	7.988601596032928
Encrypted:	false
SSDEEP:	384:WF9srt3EJfKy7iOpqErJeqQhzsaZqPTPabcoqYdBTKYPvS9BlTf:Wn6UhKYieqAiPQTwclYQLlTf
MD5:	115C2D84727B41DA5E9B4394887A8C40
SHA1:	44F495A7F32620E51ACCA2E78F7E0615CB305781
SHA-256:	AE0E442895406E9922237108496C2CD60F4947649A826463E2DA9860B5C25DD6
SHA-512:	00402945111722B041F317B082B7103BCC470C2112D86847EAC44674053FC0642C5DF72015DCB57C65C4FFABB7B03ECE7E5F889190F09A45CEF1F3E35F830F45
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......H........ ..H8................................\|.`..J.\..<........-..Z...x.6.$..0. .... ..S.7.5..K!.;..../.`..Sn.J.e.52P.(.....=9....f.....$....fZ.p...N...t....6.lfS.Ju.i.o.g..<....T"O.o..4..4....M/N.>.K..."[.P...W.u.>]................A.9z....IN^....z..Y.{....m=...+X9<?.......(IAG8rD....52L0.p .EJ..p....=.......[U...pz..g...../L.U.......P..W.U..q$L..6......C.M.0..R..........D(.ilX.Y..SZ.R...Q..j.6.@\."\|.l......3....,.T.....L...ap0......6.j.\&O.z`.$._+vwnr...,....?W.T....!.J...L#%.......A}........\.....l...:....U..u.J.0....O......&.!.)4.V..:.}.0f....:W......?U.....%...b...!....yA.sw.....5..T .}{.t!F.G....{"..pQ.S.v.S....t......U.Y\|.v.@....\|..(..V.........^....../.7......K......J.Uq/L.T-.`.O........;........';vWq.+....J...J..p.....sB`(1LC.k....?Z{...v>dS....F..........\.....UetU........6.V...vE....._.../...%.q...^.l...>^.z..l..p....j..@H...`X.p...KQ. .<@...I...BF.......L..6...y.2=.P....8;..@`.m.....R.B.L.r.*T.T..l@.6.Y....}g.....F.n...

Chrome Cache Entry: 49

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3909)
Category:	downloaded
Size (bytes):	9115
Entropy (8bit):	6.0587900718391925
Encrypted:	false
SSDEEP:	192:Ywnb1iC9OA9XXMa9kukrALQDUnulGVopLAGCALQD6vnglET31iCLL3d:7B8H3DUulGmmv3D6vglETliCfN
MD5:	1EB970CE5A18BEC7165F016DF8238566
SHA1:	9EFD1514AF80FE14DB4ED28E9BC53975B9EE089C
SHA-256:	70D613E3ACFBA24FD2876FCBACAF639E1E111EF4D54BAF70761C47673F37D6A3
SHA-512:	21B4D800CC282CA452F7394E95D5382340AC3481A002C21DA681005A44F18EA6CF43959990CD715B4657F180E0E96D6087FE724F3200E909F9FD70EBCD5511BD
Malicious:	false
Reputation:	low
URL:	https://ijazkhan09.github.io/favicon.ico
Preview:	<!DOCTYPE html>.<html>. <head>. <meta http-equiv="Content-type" content="text/html; charset=utf-8">. <meta http-equiv="Content-Security-Policy" content="default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'">. <title>Site not found · GitHub Pages</title>. <style type="text/css" media="screen">. body {. background-color: #f1f1f1;. margin: 0;. font-family: "Helvetica Neue", Helvetica, Arial, sans-serif;. }.. .container { margin: 50px auto 40px auto; width: 600px; text-align: center; }.. a { color: #4183c4; text-decoration: none; }. a:hover { text-decoration: underline; }.. h1 { width: 800px; position:relative; left: -100px; letter-spacing: -1px; line-height: 60px; font-size: 60px; font-weight: 100; margin: 0px 0 50px 0; text-shadow: 0 1px 0 #fff; }. p { color: rgba(0, 0, 0, 0.5); margin: 20px 0; line-height: 1.6; }.. ul { list-style: none; margin: 25px 0; padding: 0; }. li { d

Chrome Cache Entry: 50

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2549
Entropy (8bit):	4.065824216102575
Encrypted:	false
SSDEEP:	24:t4tQ6dEHu+4CE/EiFyCmxOJLGe1sxmJLOTyX3WCQ9yCmxOJLA5J2z5D6M9JMPxg0:WiE/yCmr9hj9mP0kOpFnqo7gX
MD5:	ECD94021D2C853C3B8DEB8203BA17300
SHA1:	6F0E24BAF66AE386041E8FAF42363418A4C96144
SHA-256:	0D6F8D206A6BD8B60A2048A3DF206AC956A2F633786E4AF1C02057F81758AD7A
SHA-512:	1967613484EB4FB2A50628CCED684C3E1022D1DF51D5AA86ADE53828DBDF0A748A8E99669C08EC5A9AA4BA97DC74F709AD4798BF486C1BAEEC60D24B223E5D50
Malicious:	false
Reputation:	low
URL:	https://ijazkhan09.github.io/facebook_login_page/images/infofacebook.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1090" height="360" fill="none" viewBox="0 0 1090 360">. <path fill="#0866FF" d="M881.583 257.897h29.48v-47.696l41.137 47.696h36.072l-47.89-54.969 40.909-47.663h-32.825l-37.403 43.93v-96.982l-29.48 3.864v151.82Zm-67.988-105.261c-32.728 0-55.455 22.013-55.455 53.929s22.727 53.929 55.455 53.929c32.727 0 55.455-22.013 55.455-53.929s-22.728-53.929-55.455-53.929Zm0 82.728c-15.163 0-25.552-11.721-25.552-28.799s10.389-28.799 25.552-28.799c15.162 0 25.552 11.721 25.552 28.799s-10.39 28.799-25.552 28.799Zm-119.807-82.728c-32.727 0-55.455 22.013-55.455 53.929s22.728 53.929 55.455 53.929c32.728 0 55.455-22.013 55.455-53.929s-22.727-53.929-55.455-53.929Zm0 82.728c-15.162 0-25.552-11.721-25.552-28.799s10.39-28.799 25.552-28.799c15.163 0 25.552 11.721 25.552 28.799s-10.389 28.799-25.552 28.799Zm-112.826-82.728c-13.636 0-24.935 5.357-32.013 15.162v-65.585l-29.513 3.831v151.82h26.169l.519-15.844c6.981 11.818 19.481 18.474 34.838 18.474 27.988 0 48.475-22.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 13, 2024 18:03:38.015973091 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 13, 2024 18:03:47.624135017 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 13, 2024 18:03:48.299365044 CEST	49735	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:03:48.299427986 CEST	443	49735	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:48.299525976 CEST	49735	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:03:48.299711943 CEST	49736	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:03:48.299772024 CEST	443	49736	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:48.299844980 CEST	49736	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:03:48.299902916 CEST	49735	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:03:48.299923897 CEST	443	49735	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:48.300126076 CEST	49736	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:03:48.300162077 CEST	443	49736	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:48.796278954 CEST	443	49735	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:48.797776937 CEST	49735	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:03:48.797802925 CEST	443	49735	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:48.798676968 CEST	443	49735	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:48.798743963 CEST	49735	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:03:48.799998045 CEST	49735	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:03:48.800056934 CEST	443	49735	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:48.800271988 CEST	49735	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:03:48.800280094 CEST	443	49735	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:48.803277016 CEST	443	49736	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:48.803498030 CEST	49736	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:03:48.803517103 CEST	443	49736	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:48.804554939 CEST	443	49736	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:48.804622889 CEST	49736	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:03:48.804924011 CEST	49736	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:03:48.804989100 CEST	443	49736	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:48.845061064 CEST	49735	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:03:48.861409903 CEST	49736	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:03:48.861427069 CEST	443	49736	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:48.943058014 CEST	443	49735	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:48.943150043 CEST	443	49735	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:48.943222046 CEST	49735	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:03:48.943523884 CEST	49735	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:03:48.943542004 CEST	443	49735	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:48.945658922 CEST	49736	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:03:48.991409063 CEST	443	49736	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:49.093691111 CEST	443	49736	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:49.093806982 CEST	443	49736	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:49.093969107 CEST	49736	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:03:49.094504118 CEST	49736	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:03:49.094527006 CEST	443	49736	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:49.107840061 CEST	49739	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:03:49.107875109 CEST	443	49739	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:49.107939959 CEST	49739	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:03:49.108540058 CEST	49740	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:03:49.108593941 CEST	443	49740	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:49.108666897 CEST	49739	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:03:49.108669043 CEST	49740	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:03:49.108683109 CEST	443	49739	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:49.108805895 CEST	49740	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:03:49.108827114 CEST	443	49740	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:49.580085993 CEST	443	49740	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:49.580868006 CEST	49740	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:03:49.580890894 CEST	443	49740	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:49.581197023 CEST	443	49740	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:49.581919909 CEST	49740	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:03:49.581979990 CEST	443	49740	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:49.582341909 CEST	49740	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:03:49.603902102 CEST	443	49739	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:49.604258060 CEST	49739	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:03:49.604275942 CEST	443	49739	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:49.605391979 CEST	443	49739	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:49.605829000 CEST	49739	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:03:49.605971098 CEST	49739	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:03:49.605974913 CEST	443	49739	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:49.605997086 CEST	443	49739	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:49.627398968 CEST	443	49740	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:49.657020092 CEST	49739	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:03:49.692924976 CEST	443	49740	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:49.693022966 CEST	443	49740	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:49.693089008 CEST	443	49740	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:49.693105936 CEST	49740	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:03:49.693176985 CEST	49740	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:03:49.696557045 CEST	49740	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:03:49.696602106 CEST	443	49740	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:49.721146107 CEST	443	49739	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:49.721317053 CEST	443	49739	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:49.721379042 CEST	49739	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:03:49.721396923 CEST	443	49739	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:49.721489906 CEST	443	49739	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:49.721637011 CEST	49739	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:03:49.723352909 CEST	49739	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:03:49.723371983 CEST	443	49739	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:49.747205973 CEST	49743	443	192.168.2.4	185.199.108.153
Oct 13, 2024 18:03:49.747241020 CEST	443	49743	185.199.108.153	192.168.2.4
Oct 13, 2024 18:03:49.747344971 CEST	49743	443	192.168.2.4	185.199.108.153
Oct 13, 2024 18:03:49.747538090 CEST	49743	443	192.168.2.4	185.199.108.153
Oct 13, 2024 18:03:49.747554064 CEST	443	49743	185.199.108.153	192.168.2.4
Oct 13, 2024 18:03:50.214190006 CEST	443	49743	185.199.108.153	192.168.2.4
Oct 13, 2024 18:03:50.214538097 CEST	49743	443	192.168.2.4	185.199.108.153
Oct 13, 2024 18:03:50.214569092 CEST	443	49743	185.199.108.153	192.168.2.4
Oct 13, 2024 18:03:50.218199968 CEST	443	49743	185.199.108.153	192.168.2.4
Oct 13, 2024 18:03:50.218290091 CEST	49743	443	192.168.2.4	185.199.108.153
Oct 13, 2024 18:03:50.218784094 CEST	49743	443	192.168.2.4	185.199.108.153
Oct 13, 2024 18:03:50.218921900 CEST	49743	443	192.168.2.4	185.199.108.153
Oct 13, 2024 18:03:50.218951941 CEST	443	49743	185.199.108.153	192.168.2.4
Oct 13, 2024 18:03:50.272119045 CEST	49743	443	192.168.2.4	185.199.108.153
Oct 13, 2024 18:03:50.272135973 CEST	443	49743	185.199.108.153	192.168.2.4
Oct 13, 2024 18:03:50.315939903 CEST	443	49743	185.199.108.153	192.168.2.4
Oct 13, 2024 18:03:50.316009045 CEST	49743	443	192.168.2.4	185.199.108.153
Oct 13, 2024 18:03:50.316024065 CEST	443	49743	185.199.108.153	192.168.2.4
Oct 13, 2024 18:03:50.316143990 CEST	443	49743	185.199.108.153	192.168.2.4
Oct 13, 2024 18:03:50.316188097 CEST	49743	443	192.168.2.4	185.199.108.153
Oct 13, 2024 18:03:50.317162037 CEST	49743	443	192.168.2.4	185.199.108.153
Oct 13, 2024 18:03:50.317181110 CEST	443	49743	185.199.108.153	192.168.2.4
Oct 13, 2024 18:03:50.368952990 CEST	49744	443	192.168.2.4	142.250.185.132
Oct 13, 2024 18:03:50.368985891 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 13, 2024 18:03:50.369040012 CEST	49744	443	192.168.2.4	142.250.185.132
Oct 13, 2024 18:03:50.369467974 CEST	49744	443	192.168.2.4	142.250.185.132
Oct 13, 2024 18:03:50.369483948 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 13, 2024 18:03:50.696403027 CEST	49747	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:03:50.696461916 CEST	443	49747	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:50.696510077 CEST	49747	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:03:50.697235107 CEST	49747	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:03:50.697251081 CEST	443	49747	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:51.022594929 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 13, 2024 18:03:51.022986889 CEST	49744	443	192.168.2.4	142.250.185.132
Oct 13, 2024 18:03:51.023009062 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 13, 2024 18:03:51.024023056 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 13, 2024 18:03:51.024089098 CEST	49744	443	192.168.2.4	142.250.185.132
Oct 13, 2024 18:03:51.025204897 CEST	49744	443	192.168.2.4	142.250.185.132
Oct 13, 2024 18:03:51.025265932 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 13, 2024 18:03:51.077013969 CEST	49744	443	192.168.2.4	142.250.185.132
Oct 13, 2024 18:03:51.077035904 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 13, 2024 18:03:51.123876095 CEST	49744	443	192.168.2.4	142.250.185.132
Oct 13, 2024 18:03:51.130085945 CEST	49748	443	192.168.2.4	184.28.90.27
Oct 13, 2024 18:03:51.130162001 CEST	443	49748	184.28.90.27	192.168.2.4
Oct 13, 2024 18:03:51.130270958 CEST	49748	443	192.168.2.4	184.28.90.27
Oct 13, 2024 18:03:51.131911039 CEST	49748	443	192.168.2.4	184.28.90.27
Oct 13, 2024 18:03:51.131944895 CEST	443	49748	184.28.90.27	192.168.2.4
Oct 13, 2024 18:03:51.183010101 CEST	443	49747	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:51.184554100 CEST	49747	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:03:51.184621096 CEST	443	49747	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:51.185066938 CEST	443	49747	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:51.185933113 CEST	49747	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:03:51.186006069 CEST	443	49747	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:51.186084986 CEST	49747	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:03:51.231401920 CEST	443	49747	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:51.305131912 CEST	443	49747	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:51.305208921 CEST	443	49747	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:51.305239916 CEST	443	49747	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:51.305253983 CEST	49747	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:03:51.305260897 CEST	443	49747	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:51.305322886 CEST	443	49747	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:51.305356979 CEST	49747	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:03:51.314591885 CEST	443	49747	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:51.314625025 CEST	443	49747	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:51.314627886 CEST	49747	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:03:51.314644098 CEST	443	49747	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:51.314681053 CEST	49747	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:03:51.314693928 CEST	443	49747	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:51.314713001 CEST	443	49747	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:51.314748049 CEST	49747	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:03:51.318689108 CEST	49747	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:03:51.318721056 CEST	443	49747	185.199.109.153	192.168.2.4
Oct 13, 2024 18:03:51.857837915 CEST	443	49748	184.28.90.27	192.168.2.4
Oct 13, 2024 18:03:51.857961893 CEST	49748	443	192.168.2.4	184.28.90.27
Oct 13, 2024 18:03:51.860573053 CEST	49748	443	192.168.2.4	184.28.90.27
Oct 13, 2024 18:03:51.860610008 CEST	443	49748	184.28.90.27	192.168.2.4
Oct 13, 2024 18:03:51.860867977 CEST	443	49748	184.28.90.27	192.168.2.4
Oct 13, 2024 18:03:51.902441025 CEST	49748	443	192.168.2.4	184.28.90.27
Oct 13, 2024 18:03:51.947392941 CEST	443	49748	184.28.90.27	192.168.2.4
Oct 13, 2024 18:03:52.187577963 CEST	443	49748	184.28.90.27	192.168.2.4
Oct 13, 2024 18:03:52.187650919 CEST	443	49748	184.28.90.27	192.168.2.4
Oct 13, 2024 18:03:52.187728882 CEST	49748	443	192.168.2.4	184.28.90.27
Oct 13, 2024 18:03:52.187944889 CEST	49748	443	192.168.2.4	184.28.90.27
Oct 13, 2024 18:03:52.187993050 CEST	443	49748	184.28.90.27	192.168.2.4
Oct 13, 2024 18:03:52.188024998 CEST	49748	443	192.168.2.4	184.28.90.27
Oct 13, 2024 18:03:52.188043118 CEST	443	49748	184.28.90.27	192.168.2.4
Oct 13, 2024 18:03:52.223721027 CEST	49749	443	192.168.2.4	184.28.90.27
Oct 13, 2024 18:03:52.223774910 CEST	443	49749	184.28.90.27	192.168.2.4
Oct 13, 2024 18:03:52.223901987 CEST	49749	443	192.168.2.4	184.28.90.27
Oct 13, 2024 18:03:52.224646091 CEST	49749	443	192.168.2.4	184.28.90.27
Oct 13, 2024 18:03:52.224657059 CEST	443	49749	184.28.90.27	192.168.2.4
Oct 13, 2024 18:03:52.934617043 CEST	443	49749	184.28.90.27	192.168.2.4
Oct 13, 2024 18:03:52.934817076 CEST	49749	443	192.168.2.4	184.28.90.27
Oct 13, 2024 18:03:52.936094999 CEST	49749	443	192.168.2.4	184.28.90.27
Oct 13, 2024 18:03:52.936105013 CEST	443	49749	184.28.90.27	192.168.2.4
Oct 13, 2024 18:03:52.936332941 CEST	443	49749	184.28.90.27	192.168.2.4
Oct 13, 2024 18:03:52.937748909 CEST	49749	443	192.168.2.4	184.28.90.27
Oct 13, 2024 18:03:52.983407021 CEST	443	49749	184.28.90.27	192.168.2.4
Oct 13, 2024 18:03:53.266917944 CEST	443	49749	184.28.90.27	192.168.2.4
Oct 13, 2024 18:03:53.266976118 CEST	443	49749	184.28.90.27	192.168.2.4
Oct 13, 2024 18:03:53.267028093 CEST	49749	443	192.168.2.4	184.28.90.27
Oct 13, 2024 18:03:53.267880917 CEST	49749	443	192.168.2.4	184.28.90.27
Oct 13, 2024 18:03:53.267904997 CEST	443	49749	184.28.90.27	192.168.2.4
Oct 13, 2024 18:03:53.267916918 CEST	49749	443	192.168.2.4	184.28.90.27
Oct 13, 2024 18:03:53.267930984 CEST	443	49749	184.28.90.27	192.168.2.4
Oct 13, 2024 18:04:00.918023109 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 13, 2024 18:04:00.918101072 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 13, 2024 18:04:00.918162107 CEST	49744	443	192.168.2.4	142.250.185.132
Oct 13, 2024 18:04:01.086285114 CEST	49744	443	192.168.2.4	142.250.185.132
Oct 13, 2024 18:04:01.086321115 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 13, 2024 18:04:05.396073103 CEST	80	49723	84.201.210.20	192.168.2.4
Oct 13, 2024 18:04:05.396233082 CEST	49723	80	192.168.2.4	84.201.210.20
Oct 13, 2024 18:04:05.396325111 CEST	49723	80	192.168.2.4	84.201.210.20
Oct 13, 2024 18:04:05.401685953 CEST	80	49723	84.201.210.20	192.168.2.4
Oct 13, 2024 18:04:08.046627998 CEST	49756	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:04:08.046706915 CEST	443	49756	185.199.109.153	192.168.2.4
Oct 13, 2024 18:04:08.046787977 CEST	49756	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:04:08.046992064 CEST	49757	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:04:08.047036886 CEST	443	49757	185.199.109.153	192.168.2.4
Oct 13, 2024 18:04:08.047084093 CEST	49757	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:04:08.050062895 CEST	49757	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:04:08.050077915 CEST	443	49757	185.199.109.153	192.168.2.4
Oct 13, 2024 18:04:08.050343990 CEST	49756	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:04:08.050376892 CEST	443	49756	185.199.109.153	192.168.2.4
Oct 13, 2024 18:04:08.513719082 CEST	443	49757	185.199.109.153	192.168.2.4
Oct 13, 2024 18:04:08.514311075 CEST	49757	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:04:08.514373064 CEST	443	49757	185.199.109.153	192.168.2.4
Oct 13, 2024 18:04:08.514739037 CEST	443	49757	185.199.109.153	192.168.2.4
Oct 13, 2024 18:04:08.515847921 CEST	49757	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:04:08.515847921 CEST	443	49756	185.199.109.153	192.168.2.4
Oct 13, 2024 18:04:08.515927076 CEST	443	49757	185.199.109.153	192.168.2.4
Oct 13, 2024 18:04:08.516056061 CEST	49757	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:04:08.516241074 CEST	49756	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:04:08.516304970 CEST	443	49756	185.199.109.153	192.168.2.4
Oct 13, 2024 18:04:08.516738892 CEST	443	49756	185.199.109.153	192.168.2.4
Oct 13, 2024 18:04:08.517225981 CEST	49756	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:04:08.517307043 CEST	443	49756	185.199.109.153	192.168.2.4
Oct 13, 2024 18:04:08.559793949 CEST	49756	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:04:08.563406944 CEST	443	49757	185.199.109.153	192.168.2.4
Oct 13, 2024 18:04:08.626889944 CEST	443	49757	185.199.109.153	192.168.2.4
Oct 13, 2024 18:04:08.626960993 CEST	443	49757	185.199.109.153	192.168.2.4
Oct 13, 2024 18:04:08.627052069 CEST	49757	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:04:08.630743027 CEST	49757	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:04:08.630786896 CEST	443	49757	185.199.109.153	192.168.2.4
Oct 13, 2024 18:04:22.274589062 CEST	49759	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:04:22.274694920 CEST	443	49759	185.199.109.153	192.168.2.4
Oct 13, 2024 18:04:22.274821043 CEST	49759	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:04:22.277307034 CEST	49759	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:04:22.277343988 CEST	443	49759	185.199.109.153	192.168.2.4
Oct 13, 2024 18:04:22.745112896 CEST	443	49759	185.199.109.153	192.168.2.4
Oct 13, 2024 18:04:22.752815962 CEST	49759	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:04:22.752856016 CEST	443	49759	185.199.109.153	192.168.2.4
Oct 13, 2024 18:04:22.754219055 CEST	443	49759	185.199.109.153	192.168.2.4
Oct 13, 2024 18:04:22.760344028 CEST	49759	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:04:22.760687113 CEST	443	49759	185.199.109.153	192.168.2.4
Oct 13, 2024 18:04:22.814584970 CEST	49759	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:04:42.413558960 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:42.413600922 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:42.413665056 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:42.414330006 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:42.414350986 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.080120087 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.080219030 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:43.083321095 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:43.083337069 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.083600044 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.098325968 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:43.143423080 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.210829020 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.210863113 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.210931063 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:43.210966110 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.211021900 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.211038113 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:43.211067915 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:43.297184944 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.297202110 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.297271967 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:43.297291040 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.297398090 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:43.299732924 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.299746037 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.299851894 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:43.299865007 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.299896955 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:43.431165934 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.431193113 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.431246996 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:43.431271076 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.431302071 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:43.431317091 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:43.431906939 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.431932926 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.431967974 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:43.431976080 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.431998968 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:43.432017088 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:43.432665110 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.432686090 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.432739973 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:43.432745934 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.432780981 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:43.432796955 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:43.433561087 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.433579922 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.433623075 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:43.433636904 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.433666945 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:43.433684111 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:43.518289089 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.518312931 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.518367052 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:43.518388987 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.518421888 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:43.518460989 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:43.521318913 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.521338940 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.521403074 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:43.521411896 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.521452904 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:43.522217989 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.522237062 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.522283077 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:43.522289038 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.522319078 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:43.522336960 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:43.522994995 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.523013115 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.523076057 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:43.523082972 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.523119926 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:43.633312941 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.633335114 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.633403063 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:43.633431911 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.633464098 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:43.633464098 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:43.634130001 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.634149075 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.634182930 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:43.634191036 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.634229898 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:43.634229898 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:43.634557009 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.634649038 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.634644985 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:43.634852886 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:43.698043108 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:43.698091030 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.698111057 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:43.698118925 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.926260948 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:43.926311970 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.926388025 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:43.927709103 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:43.927865982 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.927953005 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:43.938066006 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:43.938095093 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.938285112 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:43.938947916 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:43.938966990 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.939016104 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:43.955970049 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:43.955986977 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.958664894 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:43.958744049 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.959008932 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:43.959027052 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.959209919 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:43.959239960 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.961126089 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:43.961215973 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:43.961482048 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:43.961710930 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:43.961747885 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:44.614038944 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:44.614670992 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:44.614737034 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:44.615268946 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:44.615286112 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:44.617758989 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:44.618185043 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:44.618246078 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:44.618577957 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:44.618592024 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:44.623792887 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:44.624176979 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:44.624195099 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:44.624572039 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:44.624583006 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:44.637043953 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:44.637310028 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:44.637365103 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:44.637372971 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:44.637769938 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:44.637769938 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:44.637784004 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:44.637794971 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:44.638223886 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:44.638228893 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:44.716159105 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:44.716186047 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:44.716253996 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:44.716315985 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:44.716372013 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:44.716583967 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:44.716583967 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:44.716605902 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:44.716648102 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:44.716717005 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:44.719600916 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:44.719696999 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:44.719777107 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:44.719933033 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:44.719966888 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:44.720000982 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:44.720024109 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:44.720078945 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:44.720089912 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:44.720146894 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:44.720277071 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:44.720277071 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:44.720315933 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:44.720343113 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:44.722517014 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:44.722557068 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:44.722841978 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:44.722951889 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:44.722969055 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:44.727627993 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:44.727654934 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:44.727703094 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:44.727722883 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:44.727762938 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:44.727823019 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:44.727854013 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:44.727873087 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:44.727896929 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:44.727910042 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:44.729978085 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:44.730036974 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:44.730196953 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:44.730350971 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:44.730379105 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:44.747633934 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:44.747688055 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:44.747744083 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:44.747921944 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:44.747921944 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:44.747937918 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:44.747946978 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:44.748478889 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:44.748528957 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:44.748670101 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:44.748739958 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:44.748747110 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:44.748759985 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:44.748764992 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:44.750508070 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:44.750593901 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:44.750668049 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:44.750832081 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:44.750880003 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:44.751219988 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:44.751255989 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:44.751315117 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:44.751435995 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:44.751446962 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:45.369952917 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:45.370599031 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:45.370665073 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:45.371138096 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:45.371150970 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:45.372564077 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:45.372921944 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:45.372927904 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:45.373318911 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:45.373322964 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:45.379817963 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:45.380212069 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:45.380274057 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:45.380637884 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:45.380654097 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:45.412581921 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:45.413543940 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:45.414112091 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:45.414196968 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:45.414607048 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:45.414612055 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:45.414627075 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:45.414628029 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:45.415138006 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:45.415148020 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:45.471379042 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:45.471456051 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:45.471721888 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:45.471801996 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:45.471801996 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:45.471847057 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:45.471873045 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:45.473675966 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:45.473741055 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:45.473978043 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:45.474097967 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:45.474097967 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:45.474113941 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:45.474133015 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:45.475281954 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:45.475322008 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:45.475544930 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:45.475775957 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:45.475784063 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:45.476408005 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:45.476454973 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:45.476517916 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:45.476624966 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:45.476634026 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:45.491938114 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:45.492089987 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:45.492188931 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:45.492294073 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:45.492294073 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:45.492328882 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:45.492372036 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:45.494858980 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:45.494945049 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:45.495166063 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:45.495321989 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:45.495354891 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:45.741687059 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:45.741709948 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:45.741755009 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:45.741782904 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:45.741822004 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:45.741852045 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:45.742300987 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:45.742300987 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:45.742351055 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:45.742378950 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:45.742692947 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:45.742738962 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:45.742784977 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:45.742803097 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:45.745789051 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:45.745826960 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:45.745841026 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:45.745851994 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:45.745923042 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:45.745923042 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:45.746118069 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:45.746118069 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:45.746128082 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:45.746143103 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.123338938 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.123970985 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:46.123997927 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.124360085 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:46.124367952 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.127737999 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.128096104 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:46.128175020 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.128474951 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:46.128489017 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.224836111 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.224910021 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.225049973 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:46.225187063 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:46.225208044 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.225219011 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:46.225224972 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.228534937 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:46.228627920 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.228723049 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:46.228914022 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:46.228934050 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.229593992 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.229667902 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.229722023 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:46.229803085 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:46.229803085 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:46.229845047 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.229892015 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.231998920 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:46.232022047 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.232104063 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:46.232244968 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:46.232256889 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.381994963 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.382595062 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:46.382658005 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.383058071 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:46.383074999 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.404808044 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.405430079 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:46.405447006 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.405864954 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:46.405869007 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.420032978 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.420558929 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:46.420567036 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.420984983 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:46.420989037 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.493643999 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.493722916 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.493793011 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:46.494048119 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:46.494095087 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.494124889 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:46.494142056 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.497241974 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:46.497282982 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.497400999 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:46.497541904 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:46.497556925 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.506309986 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.506387949 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.506725073 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:46.506725073 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:46.506772041 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:46.506787062 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.509500980 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:46.509547949 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.509617090 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:46.509778976 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:46.509797096 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.525119066 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.525181055 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.525264978 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:46.525458097 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:46.525470972 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.525537014 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:46.525546074 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.528563976 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:46.528630018 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.528707981 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:46.528892994 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:46.528919935 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.884377003 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.884965897 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:46.884993076 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.885421991 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:46.885437012 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.893825054 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.895329952 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:46.895411015 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.895936966 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:46.895951033 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.986263037 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.986355066 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.986566067 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:46.986682892 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:46.986682892 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:46.986706018 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.986716032 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.989720106 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:46.989775896 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.989850998 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:46.990034103 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:46.990046024 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.997133017 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.997185946 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.997267008 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:46.997414112 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:46.997436047 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:46.997451067 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:46.997457981 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:47.000160933 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:47.000201941 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:47.000269890 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:47.000451088 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:47.000468016 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:47.177573919 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:47.178158998 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:47.178219080 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:47.178639889 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:47.178652048 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:47.183891058 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:47.184243917 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:47.184343100 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:47.184359074 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:47.184663057 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:47.184727907 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:47.184772015 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:47.184777021 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:47.185158968 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:47.185173988 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:47.279983044 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:47.280050993 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:47.280286074 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:47.280345917 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:47.280364037 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:47.280373096 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:47.280379057 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:47.284285069 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:47.284318924 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:47.284447908 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:47.284642935 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:47.284651041 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:47.285207987 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:47.285279989 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:47.285420895 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:47.285420895 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:47.286350965 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:47.286365986 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:47.286777973 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:47.286834955 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:47.286987066 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:47.287113905 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:47.287139893 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:47.287158012 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:47.287166119 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:47.287981033 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:47.288016081 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:47.288104057 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:47.288279057 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:47.288290977 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:47.289132118 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:47.289170027 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:47.289230108 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:47.289427996 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:47.289441109 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:47.753241062 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:47.754039049 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:47.754055023 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:47.754098892 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:47.755191088 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:47.755197048 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:47.755816936 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:47.755825996 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:47.756444931 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:47.756450891 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:47.856034994 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:47.856118917 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:47.856252909 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:47.857557058 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:47.857621908 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:47.857743025 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:47.861679077 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:47.861721039 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:47.861748934 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:47.861764908 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:47.864607096 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:47.864613056 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:47.864640951 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:47.864645958 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:47.868283987 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:47.868331909 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:47.868407011 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:47.868907928 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:47.868923903 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:47.870090008 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:47.870142937 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:47.870383024 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:47.870521069 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:47.870541096 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:47.949956894 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:47.950620890 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:47.950654030 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:47.951050997 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:47.951443911 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:47.951457977 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:47.951947927 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:47.951977968 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:47.953094006 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:47.953099966 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:47.982445002 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:47.983460903 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:47.983494043 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:47.984086037 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:47.984102011 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.052289963 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.052367926 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.052566051 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.052619934 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.052633047 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.052679062 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.052989960 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.053030968 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.053059101 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.053073883 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.054680109 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.054697990 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.054743052 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.054750919 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.059704065 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.059736013 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.059880018 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.060807943 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.060820103 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.061959028 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.062002897 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.062074900 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.062282085 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.062299967 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.089379072 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.089458942 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.089602947 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.089767933 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.089785099 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.089818954 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.089833021 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.092909098 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.092972994 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.093043089 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.093401909 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.093437910 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.545058966 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.545597076 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.545649052 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.546082973 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.546096087 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.557939053 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.558315039 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.558362007 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.558727026 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.558741093 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.650053024 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.650120974 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.650187969 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.650379896 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.650422096 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.650449991 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.650465012 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.653417110 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.653459072 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.653517962 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.653711081 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.653719902 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.664763927 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.664824963 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.664881945 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.665041924 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.665041924 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.665077925 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.665101051 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.667146921 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.667169094 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.667273045 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.667438030 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.667462111 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.709207058 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.709609032 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.709638119 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.710006952 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.710014105 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.736320972 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.736671925 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.736685991 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.737118006 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.737123013 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.741641998 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.741930008 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.741946936 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.742299080 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.742305994 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.810513973 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.810570002 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.810631037 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.810817003 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.810817003 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.810833931 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.810844898 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.813477993 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.813523054 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.813673973 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.813828945 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.813841105 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.841454983 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.841613054 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.842359066 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.842359066 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.842381954 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.842395067 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.843216896 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.843271017 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.843323946 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.843769073 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.843779087 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.843791962 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.843796968 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.850123882 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.850142002 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.850176096 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.850217104 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.850265980 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.850291014 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.850416899 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.850425959 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:48.850428104 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:48.850451946 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:49.313035965 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:49.313863039 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:49.313873053 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:49.314615965 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:49.314621925 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:49.318970919 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:49.319417000 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:49.319428921 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:49.320151091 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:49.320154905 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:49.413882017 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:49.413935900 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:49.414144993 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:49.414365053 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:49.414365053 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:49.414375067 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:49.414381981 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:49.419680119 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:49.419724941 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:49.419795036 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:49.419935942 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:49.419955015 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:49.422929049 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:49.422976971 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:49.423034906 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:49.423297882 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:49.423297882 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:49.423310995 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:49.423317909 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:49.426810980 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:49.426842928 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:49.426903963 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:49.427098989 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:49.427112103 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:49.461771011 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:49.462238073 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:49.462271929 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:49.463047981 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:49.463066101 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:49.539738894 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:49.540371895 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:49.540380001 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:49.541481018 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:49.541486025 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:49.592278004 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:49.593055964 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:49.593130112 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:49.593257904 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:49.593297005 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:49.598212957 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:49.598247051 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:49.598594904 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:49.598933935 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:49.598946095 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:49.648838043 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:49.648904085 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:49.649039030 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:49.649297953 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:49.649297953 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:49.649311066 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:49.649317980 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:49.653740883 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:49.653876066 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:49.653973103 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:49.654140949 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:49.654191017 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:50.103996038 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:50.104589939 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:50.104654074 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:50.105180025 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:50.105201006 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:50.134819984 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:50.135325909 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:50.135344028 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:50.135833979 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:50.135838985 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:50.206825018 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:50.206892014 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:50.207072973 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:50.211863041 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:50.211863995 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:50.211935997 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:50.211968899 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:50.215689898 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:50.215743065 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:50.215933084 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:50.216322899 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:50.216366053 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:50.248497963 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:50.248577118 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:50.248642921 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:50.249372005 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:50.249413967 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:50.249439955 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:50.249455929 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:50.256937981 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:50.257035017 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:50.257117033 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:50.257725000 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:50.257770061 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:50.259596109 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:50.260584116 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:50.260607004 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:50.262177944 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:50.262187958 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:50.315409899 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:50.316081047 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:50.316144943 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:50.317344904 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:50.317359924 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:50.360953093 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:50.361007929 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:50.361072063 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:50.361479998 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:50.361527920 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:50.361560106 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:50.361597061 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:50.366246939 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:50.366332054 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:50.366420031 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:50.366631985 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:50.366667032 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:50.411786079 CEST	49807	443	192.168.2.4	142.250.185.132
Oct 13, 2024 18:04:50.411818981 CEST	443	49807	142.250.185.132	192.168.2.4
Oct 13, 2024 18:04:50.411952972 CEST	49807	443	192.168.2.4	142.250.185.132
Oct 13, 2024 18:04:50.412595034 CEST	49807	443	192.168.2.4	142.250.185.132
Oct 13, 2024 18:04:50.412611008 CEST	443	49807	142.250.185.132	192.168.2.4
Oct 13, 2024 18:04:50.424674034 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:50.424731970 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:50.424788952 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:50.425117016 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:50.425141096 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:50.425156116 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:50.425163984 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:50.430841923 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:50.430877924 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:50.430939913 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:50.431430101 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:50.431444883 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:50.893685102 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:50.898583889 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:50.898617983 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:50.899602890 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:50.899610996 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:50.906887054 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:50.908495903 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:50.908588886 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:50.909343004 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:50.909359932 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.004935980 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.004992962 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.005050898 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.005377054 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.005403996 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.010037899 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.010071039 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.010355949 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.010917902 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.010935068 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.012126923 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.012187004 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.012279987 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.012368917 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.012408972 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.012437105 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.012451887 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.016401052 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.016428947 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.016660929 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.016980886 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.016992092 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.057991028 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.058532000 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.058562040 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.059325933 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.059341908 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.072005987 CEST	443	49807	142.250.185.132	192.168.2.4
Oct 13, 2024 18:04:51.072500944 CEST	49807	443	192.168.2.4	142.250.185.132
Oct 13, 2024 18:04:51.072519064 CEST	443	49807	142.250.185.132	192.168.2.4
Oct 13, 2024 18:04:51.072997093 CEST	443	49807	142.250.185.132	192.168.2.4
Oct 13, 2024 18:04:51.073904991 CEST	49807	443	192.168.2.4	142.250.185.132
Oct 13, 2024 18:04:51.074013948 CEST	443	49807	142.250.185.132	192.168.2.4
Oct 13, 2024 18:04:51.082865000 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.083731890 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.083760023 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.085514069 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.085520029 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.124209881 CEST	49807	443	192.168.2.4	142.250.185.132
Oct 13, 2024 18:04:51.170734882 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.170803070 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.171154022 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.171575069 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.171621084 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.171653032 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.171669960 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.177469969 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.177506924 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.177701950 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.177906990 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.177922964 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.185372114 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.185451031 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.185631037 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.185718060 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.185736895 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.185750008 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.185758114 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.188829899 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.188864946 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.189147949 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.189389944 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.189403057 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.686686039 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.687952042 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.687952042 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.687978983 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.687990904 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.696146965 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.696641922 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.696655035 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.697124958 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.697129011 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.788474083 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.788527966 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.788713932 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.789097071 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.789117098 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.789128065 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.789134026 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.794323921 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.794356108 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.794460058 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.794883966 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.794892073 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.800554037 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.800610065 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.800673008 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.800904989 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.800904989 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.800910950 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.800918102 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.803704977 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.803745985 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.803986073 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.804194927 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.804215908 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.825407982 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.825885057 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.825896025 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.826662064 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.826668024 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.837754965 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.838839054 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.838856936 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.839930058 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.839934111 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.926697016 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.926762104 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.926819086 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.927098036 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.927119970 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.927133083 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.927139997 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.929985046 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.930023909 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.930210114 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.930342913 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.930382013 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.939491034 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.939546108 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.939599991 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.939737082 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.939737082 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.939744949 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.939752102 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.942975044 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.943032980 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:51.943110943 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.943244934 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:51.943263054 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:52.451426983 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:52.451970100 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:52.451984882 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:52.452502012 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:52.452507973 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:52.470591068 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:52.471151114 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:52.471173048 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:52.471693039 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:52.471698999 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:52.545869112 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:52.546516895 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:52.546546936 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:52.547233105 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:52.547236919 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:52.552870989 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:52.552936077 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:52.553152084 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:52.553188086 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:52.553188086 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:52.553206921 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:52.553215981 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:52.556272984 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:52.556320906 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:52.556394100 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:52.556593895 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:52.556612968 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:52.577524900 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:52.577599049 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:52.577897072 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:52.578099966 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:52.578113079 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:52.578125000 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:52.578130960 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:52.582405090 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:52.582458019 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:52.582627058 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:52.582799911 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:52.582830906 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:52.592912912 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:52.593787909 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:52.593852997 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:52.594563961 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:52.594578981 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:52.597388029 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:52.597969055 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:52.598022938 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:52.598598003 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:52.598613977 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:52.651128054 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:52.651201010 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:52.651356936 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:52.651483059 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:52.651504040 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:52.651515007 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:52.651520014 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:52.654759884 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:52.654839993 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:52.654926062 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:52.655081987 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:52.655111074 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:52.694912910 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:52.694971085 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:52.695142984 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:52.695271969 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:52.695271969 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:52.695316076 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:52.695343018 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:52.698584080 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:52.698627949 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:52.698780060 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:52.698998928 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:52.699008942 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:52.699563980 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:52.699619055 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:52.699783087 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:52.699810028 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:52.699826002 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:52.699837923 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:52.699843884 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:52.702691078 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:52.702800989 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:52.702877998 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:52.703008890 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:52.703047037 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:53.220027924 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:53.220576048 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:53.220613003 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:53.221194983 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:53.221203089 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:53.231256962 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:53.231618881 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:53.231643915 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:53.232074022 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:53.232079983 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:53.316540003 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:53.317111015 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:53.317171097 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:53.317744970 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:53.317759991 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:53.323019981 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:53.323082924 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:53.323236942 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:53.323309898 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:53.323309898 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:53.323344946 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:53.323360920 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:53.326913118 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:53.326986074 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:53.327063084 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:53.327301025 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:53.327321053 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:53.333308935 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:53.333381891 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:53.333463907 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:53.333604097 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:53.333614111 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:53.333641052 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:53.333648920 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:53.336308002 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:53.336344004 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:53.336400032 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:53.336582899 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:53.336595058 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:53.366745949 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:53.367193937 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:53.367248058 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:53.367808104 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:53.367816925 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:53.417996883 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:53.418199062 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:53.418283939 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:53.418355942 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:53.418355942 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:53.418418884 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:53.418457985 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:53.421325922 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:53.421364069 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:53.421469927 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:53.421675920 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:53.421688080 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:53.469573021 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:53.469634056 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:53.469773054 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:53.469866991 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:53.469902039 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:53.469918966 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:53.469928980 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:53.472647905 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:53.472691059 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:53.472764969 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:53.472908974 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:53.472928047 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:53.530324936 CEST	49756	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:04:53.530369043 CEST	443	49756	185.199.109.153	192.168.2.4
Oct 13, 2024 18:04:53.586426020 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:53.587021112 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:53.587045908 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:53.587477922 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:53.587482929 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:53.688472033 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:53.688530922 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:53.688759089 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:53.688831091 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:53.688854933 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:53.688868046 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:53.688874960 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:53.691934109 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:53.691988945 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:53.692053080 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:53.692264080 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:53.692281008 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:53.975145102 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:53.975743055 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:53.975788116 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:53.976401091 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:53.976408958 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:53.985126972 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:53.985681057 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:53.985713005 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:53.986078978 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:53.986084938 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.071124077 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.071654081 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.071696997 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.072155952 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.072163105 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.076812029 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.076878071 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.076955080 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.077156067 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.077182055 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.077195883 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.077203989 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.080390930 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.080429077 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.080666065 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.080784082 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.080797911 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.087395906 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.087466955 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.087560892 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.087670088 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.087685108 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.087697983 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.087704897 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.090420008 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.090470076 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.090683937 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.090822935 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.090840101 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.147722960 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.148289919 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.148313999 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.148828030 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.148834944 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.172487020 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.172646999 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.172801971 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.172847986 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.172868967 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.172899008 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.172908068 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.175693035 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.175754070 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.175826073 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.175966978 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.175981045 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.252823114 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.252885103 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.252964020 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.253137112 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.253153086 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.253165007 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.253171921 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.256083012 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.256138086 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.256323099 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.256479025 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.256503105 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.369530916 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.370105982 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.370140076 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.370721102 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.370728016 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.474558115 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.474641085 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.474704981 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.474930048 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.474947929 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.474962950 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.474970102 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.478267908 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.478363037 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.478440046 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.478601933 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.478626013 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.738120079 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.738744974 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.738790035 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.739310026 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.739326000 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.741189957 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.741590977 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.741621017 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.742129087 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.742136955 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.825711012 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.826297045 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.826353073 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.826755047 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.826762915 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.838669062 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.838722944 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.838805914 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.839051008 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.839101076 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.839129925 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.839148045 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.842866898 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.842928886 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.843046904 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.843313932 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.843337059 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.916804075 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.916870117 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.917114019 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.917849064 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.917872906 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.917886019 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.917893887 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.919917107 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.921907902 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.921952963 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.922492981 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.922501087 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.924159050 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.924190998 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.924284935 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.924546003 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.924556971 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.926937103 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.926995039 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.927048922 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.927171946 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.927171946 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.927191973 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.927202940 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.929857016 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.929876089 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:54.929938078 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.931603909 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:54.931619883 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:55.022425890 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:55.022526979 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:55.022617102 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:55.026726961 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:55.026726961 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:55.026763916 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:55.026778936 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:55.031193972 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:55.031249046 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:55.031555891 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:55.032248974 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:55.032274008 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:55.167105913 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:55.167686939 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:55.167717934 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:55.168641090 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:55.168648005 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:55.274096012 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:55.274182081 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:55.274252892 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:55.274725914 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:55.274744987 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:55.274760008 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:55.274766922 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:55.283025026 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:55.283082962 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:55.283277035 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:55.283611059 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:55.283641100 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:55.496627092 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:55.497790098 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:55.497833967 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:55.498509884 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:55.498521090 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:55.583280087 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:55.586780071 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:55.586780071 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:55.586798906 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:55.586812973 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:55.602047920 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:55.602104902 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:55.602303028 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:55.602591038 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:55.602610111 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:55.602622986 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:55.602628946 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:55.608181000 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:55.608222008 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:55.608326912 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:55.608591080 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:55.608603001 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:55.641920090 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:55.642777920 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:55.642792940 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:55.646013021 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:55.646018982 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:55.681324959 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:55.682077885 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:55.682100058 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:55.683015108 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:55.683018923 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:55.685992956 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:55.686055899 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:55.686228991 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:55.710779905 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:55.710808992 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:55.715739012 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:55.715780973 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:55.715981007 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:55.716567039 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:55.716583967 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:55.749197960 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:55.749269009 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:55.749345064 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:55.749949932 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:55.749949932 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:55.749969959 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:55.749979973 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:55.754175901 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:55.754231930 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:55.754353046 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:55.754683971 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:55.754703045 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:55.782495022 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:55.782561064 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:55.782629013 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:55.783214092 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:55.783227921 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:55.783262968 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:55.783267975 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:55.787847996 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:55.787902117 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:55.788002968 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:55.788292885 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:55.788328886 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:55.959374905 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:55.959856033 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:55.959892988 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:55.960338116 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:55.960342884 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:56.064615011 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:56.064682007 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:56.064852953 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:56.064934969 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:56.064950943 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:56.064960957 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:56.064965963 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:56.067925930 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:56.067976952 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:56.068133116 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:56.068315983 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:56.068330050 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:56.296643019 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:56.297207117 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:56.297223091 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:56.297760963 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:56.297765017 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:56.365742922 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:56.367356062 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:56.367372036 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:56.367933989 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:56.367938042 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:56.405006886 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:56.405091047 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:56.405256987 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:56.413887978 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:56.413913965 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:56.413924932 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:56.413929939 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:56.416986942 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:56.417040110 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:56.417174101 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:56.417381048 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:56.417396069 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:56.417699099 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:56.418374062 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:56.418401957 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:56.419456005 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:56.419461966 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:56.440082073 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:56.440596104 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:56.440680981 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:56.441534042 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:56.441549063 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:56.472851992 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:56.472913027 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:56.472963095 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:56.473653078 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:56.473653078 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:56.473670959 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:56.473678112 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:56.477188110 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:56.477258921 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:56.477376938 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:56.477586031 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:56.477617025 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:56.521903992 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:56.521970987 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:56.522058010 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:56.523190975 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:56.523210049 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:56.531658888 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:56.531734943 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:56.531842947 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:56.532772064 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:56.532807112 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:56.544991970 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:56.545049906 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:56.545109987 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:56.545433044 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:56.545449972 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:56.545516014 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:56.545522928 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:56.549551964 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:56.549659014 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:56.549923897 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:56.550211906 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:56.550246000 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:56.751645088 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:56.757783890 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:56.757822037 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:56.758425951 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:56.758438110 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:56.858967066 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:56.858990908 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:56.859045982 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:56.859146118 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:56.859146118 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:56.859486103 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:56.859529972 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:56.859571934 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:56.859589100 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:56.864115953 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:56.864160061 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:56.864299059 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:56.864622116 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:56.864636898 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.118242979 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.119153976 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:57.119178057 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.119793892 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:57.119800091 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.165600061 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.166249990 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:57.166280031 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.167026997 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:57.167036057 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.194032907 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.194933891 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:57.194961071 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.195867062 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:57.195877075 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.208547115 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.209785938 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:57.209815979 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.210267067 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:57.210270882 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.219156027 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.219219923 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.219285965 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:57.219589949 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:57.219633102 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.219671011 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:57.219686985 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.225383043 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:57.225426912 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.225944042 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:57.226433992 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:57.226449966 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.274151087 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.274215937 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.274310112 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:57.274908066 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:57.274936914 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.274951935 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:57.274960041 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.280448914 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:57.280484915 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.280543089 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:57.281209946 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:57.281219959 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.301719904 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.301744938 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.301820993 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:57.301850080 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.302119970 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.302418947 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:57.302443027 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.302453995 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:57.302459955 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.306340933 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:57.306382895 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.306479931 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:57.306680918 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:57.306694031 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.310606003 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.310623884 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.310667038 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.310684919 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:57.310710907 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:57.311255932 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:57.311270952 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.311314106 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:57.311320066 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.315977097 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:57.316019058 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.316184998 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:57.316354036 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:57.316373110 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.556200027 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.556785107 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:57.556813002 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.557321072 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:57.557327032 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.665138006 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.665168047 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.665209055 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:57.665220022 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.665498972 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:57.665508032 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.665515900 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:57.665677071 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.665712118 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.666821003 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:57.668586969 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:57.668617964 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.668754101 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:57.668917894 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:57.668927908 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.885485888 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.885938883 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:57.885978937 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.887047052 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:57.887053013 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.953701019 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.957432032 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:57.957446098 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.959002972 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:57.959006071 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.977022886 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.977622032 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:57.977650881 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.978647947 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:57.978655100 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.985615969 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.986152887 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:57.986165047 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.987087965 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:57.987097979 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.988641977 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.988698006 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.988907099 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:57.989305019 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:57.989329100 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.989350080 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:57.989356041 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.996074915 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:57.996113062 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:57.996315956 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:57.996432066 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:57.996440887 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:58.056175947 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:58.056248903 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:58.056452990 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:58.057233095 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:58.057249069 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:58.063819885 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:58.063883066 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:58.063954115 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:58.064290047 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:58.064306021 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:58.091032028 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:58.093112946 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:58.093182087 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:58.109958887 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:58.110802889 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:58.112354994 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:58.117822886 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:58.117850065 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:58.117863894 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:58.117870092 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:58.120961905 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:58.120973110 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:58.120985985 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:58.120990992 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:58.123224020 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:58.123260975 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:58.123366117 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:58.124198914 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:58.124213934 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:58.147932053 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:58.147979975 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:58.148724079 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:58.149188042 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:58.149202108 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:58.700843096 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:58.701934099 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:58.701950073 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:58.702755928 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:58.702765942 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:58.739110947 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:58.739651918 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:58.739722013 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:58.740093946 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:58.740111113 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:58.785118103 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:58.785789013 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:58.785891056 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:58.786751032 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:58.786767960 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:58.814631939 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:58.815164089 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:58.815182924 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:58.815618038 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:58.815630913 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:58.816353083 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:58.816437960 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:58.816484928 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:58.816719055 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:58.816741943 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:58.816754103 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:58.816761971 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:58.819673061 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:58.819710016 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:58.819856882 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:58.819964886 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:58.819973946 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:58.843826056 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:58.843874931 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:58.844187021 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:58.844187975 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:58.844187975 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:58.846544027 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:58.846601963 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:58.846754074 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:58.846890926 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:58.846910954 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:58.889245033 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:58.889314890 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:58.889575005 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:58.889671087 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:58.889671087 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:58.889718056 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:58.889748096 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:58.892569065 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:58.892616987 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:58.892762899 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:58.892899990 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:58.892919064 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:58.917318106 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:58.917459965 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:58.917525053 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:58.917574883 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:58.917596102 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:58.917608976 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:58.917615891 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:58.919862032 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:58.919892073 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:58.920001984 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:58.920114040 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:58.920124054 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:59.155550003 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:59.155623913 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:59.361674070 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:59.362517118 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:59.362540007 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:59.362714052 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:59.362725973 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:59.464675903 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:59.464776039 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:59.464879990 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:59.465105057 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:59.465106010 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:59.465123892 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:59.465133905 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:59.468226910 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:59.468254089 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:59.468430042 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:59.468600988 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:59.468611956 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:59.491842985 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:59.492422104 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:59.492439032 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:59.492897034 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:59.492943048 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:59.492948055 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:59.493314981 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:59.493344069 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:59.493700981 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:59.493706942 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:59.541398048 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:59.541961908 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:59.542023897 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:59.542448044 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:59.542459965 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:59.591588974 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:59.592304945 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:59.592319012 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:59.592648029 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:59.592653990 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:59.614814043 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:59.614819050 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:59.614846945 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:59.614882946 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:59.614907026 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:59.614931107 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:59.614958048 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:59.614969969 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:59.615161896 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:59.615184069 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:59.615196943 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:59.615196943 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:59.615227938 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:59.615241051 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:59.618482113 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:59.618539095 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:59.618638992 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:59.618766069 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:59.618783951 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:59.618916035 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:59.618928909 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:59.618977070 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:59.619153976 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:59.619170904 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:59.642838001 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:59.642899990 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:59.642966986 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:59.643151045 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:59.643172026 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:59.643184900 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:59.643192053 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:59.646087885 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:59.646131039 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:59.646254063 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:59.646397114 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:59.646405935 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:59.701807976 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:59.701843023 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:59.701885939 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:59.701951027 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:59.702188015 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:59.702204943 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:59.702244997 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:59.702250957 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:59.705338955 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:59.705450058 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 13, 2024 18:04:59.705537081 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:59.705722094 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:04:59.705758095 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:00.154367924 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:00.155129910 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:00.155149937 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:00.155523062 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:00.155529022 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:00.255636930 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:00.255814075 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:00.256005049 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:00.256005049 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:00.256176949 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:00.256191969 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:00.259116888 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:00.259150028 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:00.259211063 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:00.259351969 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:00.259366035 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:00.294830084 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:00.295347929 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:00.295418024 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:00.295814991 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:00.295829058 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:00.308360100 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:00.308700085 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:00.308718920 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:00.309060097 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:00.309070110 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:00.343782902 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:00.344288111 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:00.344305038 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:00.344739914 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:00.344750881 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:00.358935118 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:00.359400034 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:00.359442949 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:00.360044003 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:00.360050917 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:00.401688099 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:00.401740074 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:00.401838064 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:00.402014971 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:00.402065992 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:00.402097940 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:00.402113914 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:00.405191898 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:00.405232906 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:00.405291080 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:00.405417919 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:00.405426979 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:00.415184021 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:00.415261030 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:00.415364027 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:00.415415049 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:00.415429115 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:00.415440083 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:00.415445089 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:00.417622089 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:00.417668104 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:00.417726994 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:00.417859077 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:00.417871952 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:00.446480036 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:00.446500063 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:00.446544886 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:00.446574926 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:00.446623087 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:00.446773052 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:00.446773052 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:00.446784973 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:00.446791887 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:00.449042082 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:00.449074030 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:00.449137926 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:00.449280977 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:00.449291945 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:00.462030888 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:00.462536097 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:00.462584019 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:00.462620974 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:00.462620974 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:00.462637901 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:00.462651014 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:00.464521885 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:00.464550018 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:00.464653015 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:00.464797974 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:00.464807034 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:00.909809113 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:00.910377979 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:00.910414934 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:00.910952091 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:00.910958052 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:00.981323957 CEST	443	49807	142.250.185.132	192.168.2.4
Oct 13, 2024 18:05:00.981381893 CEST	443	49807	142.250.185.132	192.168.2.4
Oct 13, 2024 18:05:00.981543064 CEST	49807	443	192.168.2.4	142.250.185.132
Oct 13, 2024 18:05:01.011580944 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.011657953 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.011851072 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.011934042 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.011946917 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.011961937 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.011967897 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.015310049 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.015348911 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.015428066 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.015706062 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.015717983 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.056596041 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.057090998 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.057111025 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.057626963 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.057631016 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.078388929 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.078811884 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.078862906 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.079370975 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.079376936 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.139806032 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.140731096 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.140794039 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.140822887 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.141329050 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.141330004 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.141336918 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.141349077 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.142066956 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.142074108 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.181907892 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.182167053 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.182214022 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.182254076 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.182296038 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.182354927 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.182379961 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.182404995 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.182413101 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.182862997 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.182935953 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.183939934 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.183983088 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.184000969 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.184012890 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.184019089 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.185977936 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.186068058 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.186213970 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.186247110 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.186259985 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.186292887 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.186428070 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.186444044 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.186501980 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.186539888 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.245810032 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.245857954 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.245904922 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.245910883 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.245960951 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.246237040 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.246248960 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.246262074 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.246267080 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.249121904 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.249150038 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.249397993 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.249612093 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.249619961 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.250533104 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.250613928 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.250675917 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.250714064 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.250731945 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.250745058 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.250750065 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.252909899 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.252921104 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.252981901 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.253093004 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.253101110 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.845510960 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.845592022 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.846155882 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.846216917 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.846329927 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.846354008 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.846618891 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.846632957 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.846782923 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.846793890 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.846941948 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.847281933 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.847352982 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.847621918 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.847635984 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.915604115 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.916157007 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.916167974 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.916695118 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.916698933 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.927418947 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.927886963 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.927894115 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.930643082 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.930651903 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.946089029 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.946188927 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.946309090 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.946455002 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.946476936 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.946492910 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.946500063 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.947623968 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.947767019 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.948036909 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.948081970 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.948107958 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.948122978 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.948127985 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.948739052 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.948846102 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.948903084 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.948940039 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.948956966 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.948978901 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.948983908 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.950314999 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.950342894 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.950447083 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.950756073 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.950773001 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.951083899 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.951168060 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.951256990 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.951340914 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.951376915 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.951738119 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.951770067 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:01.951852083 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.951958895 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:01.951975107 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:02.017868996 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:02.017940044 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:02.018136024 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:02.018296003 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:02.018296003 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:02.018316031 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:02.018326998 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:02.022115946 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:02.022144079 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:02.022370100 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:02.022454977 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:02.022466898 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:02.038781881 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:02.038851023 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:02.038966894 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:02.038995028 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:02.039113045 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:02.039141893 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:02.039155006 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:02.039165974 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:02.039170980 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:02.041589975 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:02.041682959 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:02.041796923 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:02.041958094 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:02.041992903 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:02.891912937 CEST	49807	443	192.168.2.4	142.250.185.132
Oct 13, 2024 18:05:02.891935110 CEST	443	49807	142.250.185.132	192.168.2.4
Oct 13, 2024 18:05:03.478419065 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:03.479131937 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:03.479149103 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:03.479645014 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:03.479650021 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:03.487225056 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:03.487605095 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:03.487633944 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:03.487994909 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:03.488004923 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:03.491095066 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:03.491791010 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:03.491806030 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:03.492032051 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:03.492130041 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:03.492141008 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:03.492486954 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:03.492494106 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:03.493031025 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:03.493037939 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:03.496493101 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:03.496835947 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:03.496848106 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:03.497226000 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:03.497231960 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:03.578449965 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:03.581615925 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:03.581664085 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:03.581667900 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:03.581722021 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:03.581789970 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:03.581804991 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:03.581831932 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:03.581839085 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:03.585117102 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:03.585210085 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:03.585427999 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:03.585608006 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:03.585640907 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:03.596138000 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:03.596214056 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:03.596278906 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:03.596451044 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:03.596483946 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:03.596515894 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:03.596528053 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:03.598730087 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:03.598819017 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:03.599030018 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:03.599179029 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:03.599215031 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:03.602397919 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:03.602447033 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:03.602611065 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:03.602682114 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:03.602683067 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:03.602699041 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:03.602721930 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:03.604671955 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:03.604696989 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:03.604846001 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:03.604976892 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:03.605004072 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:03.605149984 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:03.605191946 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:03.605324984 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:03.605350018 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:03.605350018 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:03.605360031 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:03.605366945 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:03.607243061 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:03.607404947 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:03.607445955 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:03.607474089 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:03.607474089 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:03.607530117 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:03.607539892 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:03.607561111 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:03.607567072 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:03.607568026 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:03.608073950 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:03.608098030 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:03.609836102 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:03.609870911 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:03.610079050 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:03.610330105 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:03.610341072 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:04.267744064 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:04.268816948 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:04.268816948 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:04.268891096 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:04.268918991 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:04.272272110 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:04.272948980 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:04.272948980 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:04.272969961 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:04.272978067 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:04.278539896 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:04.278989077 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:04.279006958 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:04.279200077 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:04.279210091 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:04.293057919 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:04.293705940 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:04.293705940 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:04.293730974 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:04.293745995 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:04.294348955 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:04.294802904 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:04.294811010 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:04.294956923 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:04.294961929 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:04.389107943 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:04.389170885 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:04.389220953 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:04.389275074 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:04.389314890 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:04.389357090 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:04.389384985 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:04.389431000 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:04.389558077 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:04.389566898 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:04.389579058 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:04.389585018 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:04.389702082 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:04.389702082 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:04.389702082 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:04.389777899 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:04.389843941 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:04.390373945 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:04.390388012 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:04.390434027 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:04.390446901 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:04.393467903 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:04.393467903 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:04.393493891 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:04.393506050 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:04.394012928 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:04.394033909 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:04.394066095 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:04.394066095 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:04.394131899 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:04.394273043 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:04.394289970 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:04.394320011 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:04.394332886 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:04.394426107 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:04.394437075 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:04.432358980 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:04.432398081 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:04.432440996 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:04.432481050 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:04.432612896 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:04.432636023 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:04.432683945 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:04.432712078 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:04.432712078 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:04.432755947 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:04.432770014 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:04.432795048 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:04.432826996 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:04.432826996 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:04.432840109 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:04.432858944 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:04.435038090 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:04.435106993 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:04.435189009 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:04.435220003 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:04.435256004 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:04.435359955 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:04.435432911 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:04.435435057 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:04.435447931 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:04.435451984 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.098767042 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.099411011 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.099445105 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.099872112 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.099878073 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.107846022 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.108026028 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.108253956 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.108268976 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.109074116 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.109149933 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.109806061 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.109812021 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.109915018 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.109930038 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.113425970 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.113775969 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.113810062 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.114147902 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.114160061 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.145639896 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.146095991 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.146174908 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.146481037 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.146497011 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.199589968 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.199824095 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.199862003 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.199877024 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.199929953 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.200002909 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.200012922 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.200026035 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.200031042 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.203062057 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.203077078 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.203140020 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.203293085 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.203301907 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.208935976 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.208959103 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.208998919 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.209005117 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.209042072 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.209197998 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.209201097 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.209213018 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.209216118 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.209911108 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.210114956 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.210182905 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.210300922 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.210319996 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.210328102 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.210334063 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.211621046 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.211642027 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.211806059 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.211988926 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.211998940 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.212240934 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.212264061 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.212313890 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.212405920 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.212416887 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.215735912 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.216110945 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.216151953 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.216155052 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.216193914 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.216233015 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.216234922 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.216247082 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.216249943 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.218245983 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.218288898 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.218373060 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.218509912 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.218534946 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.252687931 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.252732038 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.252794981 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.252969980 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.252975941 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.255134106 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.255161047 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.255309105 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.255456924 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.255480051 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.861087084 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.861754894 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.861797094 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.862255096 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.862261057 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.865134001 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.865514040 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.865612984 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.865890980 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.865906954 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.871628046 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.872009039 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.872041941 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.872374058 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.872380972 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.902513027 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.902894020 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.902932882 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.903297901 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.903310061 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.909024000 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.909363985 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.909395933 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.909775019 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.909785986 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.963366032 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.963430882 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.963608027 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.963735104 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.963751078 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.963773966 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.963779926 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.965986967 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.966041088 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.966106892 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.966237068 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.966238022 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.966275930 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.966300964 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.967189074 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.967211008 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.967401028 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.968216896 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.968226910 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.969281912 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.969333887 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.969398022 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.969506979 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.969535112 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.974999905 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.975027084 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.975069046 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.975071907 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.975238085 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.975255013 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.975270987 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.975277901 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.977632046 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.977653027 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:05.977715015 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.977941036 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:05.977952003 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.004235029 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.004314899 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.004462957 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:06.010474920 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:06.010493040 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.010504961 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:06.010510921 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.013961077 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.013981104 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.014028072 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.014038086 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:06.014079094 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:06.014529943 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:06.014535904 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.014544010 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:06.014547110 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.029385090 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:06.029414892 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.029531002 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:06.031893015 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:06.031913996 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.031996965 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:06.040672064 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:06.040687084 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.041126966 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:06.041148901 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.614053965 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.614532948 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:06.614568949 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.615020037 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:06.615026951 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.617156982 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.617464066 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:06.617480040 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.617877960 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:06.617885113 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.637554884 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.637885094 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:06.637902021 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.638358116 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:06.638364077 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.692270994 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.693214893 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:06.693214893 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:06.693238974 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.693245888 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.714447975 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.714569092 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.714643002 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:06.714773893 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:06.714813948 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.714843988 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:06.714860916 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.717351913 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:06.717372894 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.717442036 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:06.717792988 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:06.717803955 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.718491077 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.718589067 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.718647957 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:06.718765020 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:06.718785048 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.718801022 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:06.718807936 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.719094992 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.719482899 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:06.719506979 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.719894886 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:06.719902039 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.721086025 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:06.721107960 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.721208096 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:06.721434116 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:06.721442938 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.741091967 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.741117001 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.741158962 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.741172075 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:06.741200924 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:06.741409063 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:06.741409063 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:06.741425037 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.741434097 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.743398905 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:06.743410110 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.743582964 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:06.743719101 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:06.743729115 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.793677092 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.793704987 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.793756008 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.793802023 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:06.794117928 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:06.794118881 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:06.794127941 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.794136047 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.797151089 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:06.797175884 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.797233105 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:06.797386885 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:06.797400951 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.824004889 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.824204922 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.824434042 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:06.824474096 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:06.824492931 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.824506998 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:06.824513912 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.827482939 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:06.827495098 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:06.827716112 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:06.827770948 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:06.827778101 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:07.364280939 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:07.364876032 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:07.364891052 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:07.365307093 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:07.365315914 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:07.372407913 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:07.372817039 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:07.372848034 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:07.373275995 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:07.373284101 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:07.435277939 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:07.435844898 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:07.435869932 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:07.436346054 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:07.436352968 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:07.445869923 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:07.446310997 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:07.446345091 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:07.446686029 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:07.446693897 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:07.466411114 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:07.466567039 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:07.466658115 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:07.466734886 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:07.466734886 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:07.466753960 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:07.466763020 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:07.470244884 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:07.470308065 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:07.470401049 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:07.470635891 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:07.470658064 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:07.474185944 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:07.474348068 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:07.474404097 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:07.474450111 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:07.474467039 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:07.474479914 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:07.474484921 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:07.475840092 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:07.476689100 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:07.476722956 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:07.477113008 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:07.477123976 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:07.478120089 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:07.478151083 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:07.478270054 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:07.478427887 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:07.478449106 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:07.541934013 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:07.542216063 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:07.542496920 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:07.542496920 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:07.542531967 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:07.542550087 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:07.545537949 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:07.545589924 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:07.545680046 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:07.545983076 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:07.546009064 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:07.547466993 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:07.547492981 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:07.547548056 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:07.547549963 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:07.547590017 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:07.547770977 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:07.547784090 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:07.547797918 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:07.547802925 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:07.550313950 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:07.550354958 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:07.550453901 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:07.550615072 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:07.550643921 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:07.577781916 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:07.577856064 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:07.577940941 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:07.578133106 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:07.578155994 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:07.578180075 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:07.578192949 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:07.581065893 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:07.581089973 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:07.581167936 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:07.581348896 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:07.581362963 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:07.764481068 CEST	49759	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:05:07.764542103 CEST	443	49759	185.199.109.153	192.168.2.4
Oct 13, 2024 18:05:08.235563040 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:08.235677004 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:08.237914085 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:08.237973928 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:08.239228010 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:08.239243031 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:08.239957094 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:08.239993095 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:08.240904093 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:08.240910053 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:08.241722107 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:08.242125988 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:08.242142916 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:08.242396116 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:08.242789984 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:08.242800951 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:08.243446112 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:08.243490934 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:08.244385004 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:08.244401932 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:08.338247061 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:08.338331938 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:08.338398933 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:08.338460922 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:08.338495016 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:08.338548899 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:08.339092016 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:08.339411974 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:08.339467049 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:08.343281031 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:08.343451023 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:08.343529940 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:08.343673944 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:08.343943119 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:08.344096899 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:08.358381987 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:08.358431101 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:08.358462095 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:08.358479023 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:08.360291958 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:08.360297918 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:08.360305071 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:08.360310078 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:08.362240076 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:08.362257957 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:08.363631010 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:08.363648891 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:08.363790989 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:08.363805056 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:08.427356958 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:08.465265989 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:08.465327024 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:08.465874910 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:08.465888977 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:08.508505106 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:08.508579016 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:08.510958910 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:08.517600060 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:08.517632008 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:08.517868996 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:08.521234035 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:08.521267891 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:08.530242920 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:08.530272007 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:08.530368090 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:08.559051037 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:08.559083939 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:08.561162949 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:08.561176062 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:08.572794914 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:08.572824955 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:08.572894096 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:08.573638916 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:08.573652029 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:09.131674051 CEST	49756	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:05:09.131884098 CEST	443	49756	185.199.109.153	192.168.2.4
Oct 13, 2024 18:05:09.132314920 CEST	443	49756	185.199.109.153	192.168.2.4
Oct 13, 2024 18:05:09.132317066 CEST	49756	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:05:09.132431984 CEST	49756	443	192.168.2.4	185.199.109.153
Oct 13, 2024 18:05:09.562724113 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:09.562786102 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:09.563421011 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:09.563421965 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:09.563530922 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:09.563572884 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:09.566792965 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:09.566827059 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:09.566941977 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:09.567182064 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:09.567195892 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:10.212372065 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:10.212568045 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:10.213084936 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:10.213102102 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:10.213306904 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:10.213387012 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:10.213686943 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:10.213692904 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:10.213931084 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:10.213946104 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:10.215286016 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:10.215675116 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:10.215689898 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:10.216118097 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:10.216121912 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:10.241254091 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:10.241569996 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:10.241588116 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:10.242094040 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:10.242098093 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:10.243289948 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:10.243556976 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:10.243566990 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:10.244081020 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:10.244086027 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:10.313426971 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:10.313709021 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:10.314266920 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:10.314307928 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:10.314308882 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:10.314372063 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:10.314418077 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:10.314434052 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:10.314444065 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:10.314449072 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:10.314486980 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:10.314687014 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:10.314753056 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:10.314753056 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:10.314791918 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:10.314817905 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:10.316906929 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:10.316993952 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:10.317050934 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:10.318118095 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:10.318145037 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:10.318273067 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:10.318387985 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:10.318401098 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:10.318411112 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:10.318417072 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:10.318428040 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:10.318440914 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:10.318603992 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:10.318631887 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:10.319910049 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:10.319948912 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:10.319958925 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:10.320828915 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:10.320877075 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:10.320945978 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:10.321069002 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:10.321088076 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:10.345993042 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:10.346138954 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:10.346422911 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:10.346576929 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:10.346585035 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:10.346599102 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:10.346602917 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:10.347961903 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:10.348097086 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:10.348675966 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:10.348691940 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:10.348711967 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:10.348758936 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:10.348809958 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:10.348824024 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:10.348836899 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:10.348843098 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:10.348890066 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:10.348905087 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:10.351133108 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:10.351150036 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 13, 2024 18:05:10.351280928 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:10.351407051 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:05:10.351416111 CEST	443	49919	13.107.246.45	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 13, 2024 18:03:46.742048979 CEST	53	60651	1.1.1.1	192.168.2.4
Oct 13, 2024 18:03:47.824666977 CEST	53	55406	1.1.1.1	192.168.2.4
Oct 13, 2024 18:03:48.288466930 CEST	61540	53	192.168.2.4	1.1.1.1
Oct 13, 2024 18:03:48.288578987 CEST	57893	53	192.168.2.4	1.1.1.1
Oct 13, 2024 18:03:48.297801971 CEST	53	57893	1.1.1.1	192.168.2.4
Oct 13, 2024 18:03:48.298827887 CEST	53	61540	1.1.1.1	192.168.2.4
Oct 13, 2024 18:03:49.132985115 CEST	53	55197	1.1.1.1	192.168.2.4
Oct 13, 2024 18:03:49.708940983 CEST	53	59317	1.1.1.1	192.168.2.4
Oct 13, 2024 18:03:49.731683969 CEST	62921	53	192.168.2.4	1.1.1.1
Oct 13, 2024 18:03:49.731923103 CEST	51330	53	192.168.2.4	1.1.1.1
Oct 13, 2024 18:03:49.740382910 CEST	53	51330	1.1.1.1	192.168.2.4
Oct 13, 2024 18:03:49.740413904 CEST	53	62921	1.1.1.1	192.168.2.4
Oct 13, 2024 18:03:50.359574080 CEST	54984	53	192.168.2.4	1.1.1.1
Oct 13, 2024 18:03:50.359846115 CEST	55828	53	192.168.2.4	1.1.1.1
Oct 13, 2024 18:03:50.366533041 CEST	53	54984	1.1.1.1	192.168.2.4
Oct 13, 2024 18:03:50.367825031 CEST	53	55828	1.1.1.1	192.168.2.4
Oct 13, 2024 18:04:04.929307938 CEST	53	52018	1.1.1.1	192.168.2.4
Oct 13, 2024 18:04:06.145597935 CEST	138	138	192.168.2.4	192.168.2.255
Oct 13, 2024 18:04:23.633555889 CEST	53	63575	1.1.1.1	192.168.2.4
Oct 13, 2024 18:04:45.853944063 CEST	53	64718	1.1.1.1	192.168.2.4
Oct 13, 2024 18:04:46.336122990 CEST	53	55538	1.1.1.1	192.168.2.4
Oct 13, 2024 18:05:05.999322891 CEST	53	53213	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 13, 2024 18:03:48.288466930 CEST	192.168.2.4	1.1.1.1	0xc642	Standard query (0)	ijazkhan09.github.io	A (IP address)	IN (0x0001)	false
Oct 13, 2024 18:03:48.288578987 CEST	192.168.2.4	1.1.1.1	0xb19b	Standard query (0)	ijazkhan09.github.io	65	IN (0x0001)	false
Oct 13, 2024 18:03:49.731683969 CEST	192.168.2.4	1.1.1.1	0x847b	Standard query (0)	ijazkhan09.github.io	A (IP address)	IN (0x0001)	false
Oct 13, 2024 18:03:49.731923103 CEST	192.168.2.4	1.1.1.1	0x1285	Standard query (0)	ijazkhan09.github.io	65	IN (0x0001)	false
Oct 13, 2024 18:03:50.359574080 CEST	192.168.2.4	1.1.1.1	0x7e38	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 13, 2024 18:03:50.359846115 CEST	192.168.2.4	1.1.1.1	0x713a	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 13, 2024 18:03:48.298827887 CEST	1.1.1.1	192.168.2.4	0xc642	No error (0)	ijazkhan09.github.io		185.199.109.153	A (IP address)	IN (0x0001)	false
Oct 13, 2024 18:03:48.298827887 CEST	1.1.1.1	192.168.2.4	0xc642	No error (0)	ijazkhan09.github.io		185.199.111.153	A (IP address)	IN (0x0001)	false
Oct 13, 2024 18:03:48.298827887 CEST	1.1.1.1	192.168.2.4	0xc642	No error (0)	ijazkhan09.github.io		185.199.108.153	A (IP address)	IN (0x0001)	false
Oct 13, 2024 18:03:48.298827887 CEST	1.1.1.1	192.168.2.4	0xc642	No error (0)	ijazkhan09.github.io		185.199.110.153	A (IP address)	IN (0x0001)	false
Oct 13, 2024 18:03:49.740413904 CEST	1.1.1.1	192.168.2.4	0x847b	No error (0)	ijazkhan09.github.io		185.199.108.153	A (IP address)	IN (0x0001)	false
Oct 13, 2024 18:03:49.740413904 CEST	1.1.1.1	192.168.2.4	0x847b	No error (0)	ijazkhan09.github.io		185.199.109.153	A (IP address)	IN (0x0001)	false
Oct 13, 2024 18:03:49.740413904 CEST	1.1.1.1	192.168.2.4	0x847b	No error (0)	ijazkhan09.github.io		185.199.110.153	A (IP address)	IN (0x0001)	false
Oct 13, 2024 18:03:49.740413904 CEST	1.1.1.1	192.168.2.4	0x847b	No error (0)	ijazkhan09.github.io		185.199.111.153	A (IP address)	IN (0x0001)	false
Oct 13, 2024 18:03:50.366533041 CEST	1.1.1.1	192.168.2.4	0x7e38	No error (0)	www.google.com		142.250.185.132	A (IP address)	IN (0x0001)	false
Oct 13, 2024 18:03:50.367825031 CEST	1.1.1.1	192.168.2.4	0x713a	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 13, 2024 18:04:01.962912083 CEST	1.1.1.1	192.168.2.4	0x8d3d	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 18:04:01.962912083 CEST	1.1.1.1	192.168.2.4	0x8d3d	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 13, 2024 18:04:38.741763115 CEST	1.1.1.1	192.168.2.4	0x2ca8	No error (0)	edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 18:04:38.741763115 CEST	1.1.1.1	192.168.2.4	0x2ca8	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		84.201.210.18	A (IP address)	IN (0x0001)	false
Oct 13, 2024 18:04:38.741763115 CEST	1.1.1.1	192.168.2.4	0x2ca8	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		84.201.210.39	A (IP address)	IN (0x0001)	false
Oct 13, 2024 18:04:38.741763115 CEST	1.1.1.1	192.168.2.4	0x2ca8	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.19	A (IP address)	IN (0x0001)	false
Oct 13, 2024 18:04:38.741763115 CEST	1.1.1.1	192.168.2.4	0x2ca8	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.22	A (IP address)	IN (0x0001)	false
Oct 13, 2024 18:04:38.741763115 CEST	1.1.1.1	192.168.2.4	0x2ca8	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.37	A (IP address)	IN (0x0001)	false
Oct 13, 2024 18:04:38.741763115 CEST	1.1.1.1	192.168.2.4	0x2ca8	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.20	A (IP address)	IN (0x0001)	false
Oct 13, 2024 18:04:38.741763115 CEST	1.1.1.1	192.168.2.4	0x2ca8	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		84.201.210.37	A (IP address)	IN (0x0001)	false
Oct 13, 2024 18:04:42.412596941 CEST	1.1.1.1	192.168.2.4	0x27de	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 18:04:42.412596941 CEST	1.1.1.1	192.168.2.4	0x27de	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 13, 2024 18:04:58.961061954 CEST	1.1.1.1	192.168.2.4	0x1567	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 18:04:58.961061954 CEST	1.1.1.1	192.168.2.4	0x1567	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

ijazkhan09.github.io

https:

fs.microsoft.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	185.199.109.153	443	1368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:03:48 UTC	682	OUT	GET /facebook_login_page HTTP/1.1 Host: ijazkhan09.github.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 16:03:48 UTC	560	IN	HTTP/1.1 301 Moved Permanently Connection: close Content-Length: 162 Server: GitHub.com Content-Type: text/html permissions-policy: interest-cohort=() Location: https://ijazkhan09.github.io/facebook_login_page/ X-GitHub-Request-Id: 5709:1C849D:29A384C:2DFA3B6:670BEF64 Accept-Ranges: bytes Age: 0 Date: Sun, 13 Oct 2024 16:03:48 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890074-NYC X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1728835429.854834,VS0,VE43 Vary: Accept-Encoding X-Fastly-Request-ID: 20617833b1bafe0123b11b9fe027f9cefb16e4da
2024-10-13 16:03:48 UTC	162	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49736	185.199.109.153	443	1368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:03:48 UTC	683	OUT	GET /facebook_login_page/ HTTP/1.1 Host: ijazkhan09.github.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 16:03:49 UTC	734	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1237 Server: GitHub.com Content-Type: text/html; charset=utf-8 permissions-policy: interest-cohort=() Last-Modified: Sun, 13 Oct 2024 08:02:08 GMT Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31556952 ETag: "670b7e80-4d5" expires: Sun, 13 Oct 2024 16:13:49 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: 40D2:3AD77C:28FCD49:2D53496:670BEF65 Accept-Ranges: bytes Age: 0 Date: Sun, 13 Oct 2024 16:03:49 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890079-NYC X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1728835429.000840,VS0,VE47 Vary: Accept-Encoding X-Fastly-Request-ID: 0ff4c0d1dcaf49299e12cf67509a0b482c62daab
2024-10-13 16:03:49 UTC	1237	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 46 61 63 65 62 6f 6f 6b 20 4c 6f 67 69 6e 20 7c 20 50 61 67 65 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 73 74 79 6c 65 2e 63 73 73 22 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 73 65 63 74 69 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Facebook Login \| Page</title> <link rel="stylesheet" href="style.css"></head><body> <secti

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49740	185.199.109.153	443	1368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:03:49 UTC	588	OUT	GET /facebook_login_page/style.css HTTP/1.1 Host: ijazkhan09.github.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://ijazkhan09.github.io/facebook_login_page/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 16:03:49 UTC	754	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2280 Server: GitHub.com Content-Type: text/css; charset=utf-8 permissions-policy: interest-cohort=() x-origin-cache: HIT Last-Modified: Sun, 13 Oct 2024 08:02:08 GMT Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31556952 ETag: "670b7e80-8e8" expires: Sun, 13 Oct 2024 16:13:49 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: ECD5:190951:2D03FF9:315AB29:670BEF65 Accept-Ranges: bytes Age: 0 Date: Sun, 13 Oct 2024 16:03:49 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740054-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1728835430.640349,VS0,VE11 Vary: Accept-Encoding X-Fastly-Request-ID: 67a04fd0ce1ad3717d7506154a7120d2b1ce703f
2024-10-13 16:03:49 UTC	1378	IN	Data Raw: 40 69 6d 70 6f 72 74 20 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 52 6f 62 6f 74 6f 3a 77 67 68 74 40 31 30 30 3b 33 30 30 3b 34 30 30 3b 35 30 30 3b 37 30 30 3b 39 30 30 26 64 69 73 70 6c 61 79 3d 73 77 61 70 27 29 3b 0a 2a 7b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 63 61 70 69 74 61 6c 69 7a 65 3b 0a 7d 0a 68 74 6d 6c 7b 0a 20 20 20 20 73 63 72 6f 6c 6c 2d 62 65 68 61 76 69 6f 72 3a 20 73 6d 6f 6f 74 Data Ascii: @import url('https://fonts.googleapis.com/css2?family=Roboto:wght@100;300;400;500;700;900&display=swap');*{ margin: 0; padding: 0; list-style: none; text-decoration: none; text-transform: capitalize;}html{ scroll-behavior: smoot
2024-10-13 16:03:49 UTC	902	IN	Data Raw: 20 31 30 70 78 20 30 3b 20 2a 2f 0a 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 31 38 37 37 46 32 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 35 70 78 3b 0a 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 7d 0a 2e 66 6f 72 6d 20 2e 6d 61 69 6e 20 2e 66 6f 72 67 65 74 7b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 31 36 70 78 20 30 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 66 6f 72 6d 20 2e 6d 61 69 6e 20 2e 66 6f 72 67 Data Ascii: 10px 0; */ box-sizing: border-box; border-radius: 5px; border: 1px solid rgba(0,0,0,.2); background: #1877F2; margin-top: 5px; cursor: pointer;}.form .main .forget{ margin: 16px 0; text-align: center;}.form .main .forg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49739	185.199.109.153	443	1368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:03:49 UTC	648	OUT	GET /facebook_login_page/images/infofacebook.svg HTTP/1.1 Host: ijazkhan09.github.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ijazkhan09.github.io/facebook_login_page/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 16:03:49 UTC	744	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2549 Server: GitHub.com Content-Type: image/svg+xml permissions-policy: interest-cohort=() x-origin-cache: HIT Last-Modified: Sun, 13 Oct 2024 08:02:08 GMT Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31556952 ETag: "670b7e80-9f5" expires: Sun, 13 Oct 2024 16:13:49 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: 5A09:3B9574:2AF6F65:2F4D758:670BEF65 Accept-Ranges: bytes Age: 0 Date: Sun, 13 Oct 2024 16:03:49 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740075-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1728835430.661001,VS0,VE13 Vary: Accept-Encoding X-Fastly-Request-ID: dfd445fa3ab7a5793187354154bfb28f67b8db70
2024-10-13 16:03:49 UTC	1378	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 39 30 22 20 68 65 69 67 68 74 3d 22 33 36 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 39 30 20 33 36 30 22 3e 0a 20 20 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 30 38 36 36 46 46 22 20 64 3d 22 4d 38 38 31 2e 35 38 33 20 32 35 37 2e 38 39 37 68 32 39 2e 34 38 76 2d 34 37 2e 36 39 36 6c 34 31 2e 31 33 37 20 34 37 2e 36 39 36 68 33 36 2e 30 37 32 6c 2d 34 37 2e 38 39 2d 35 34 2e 39 36 39 20 34 30 2e 39 30 39 2d 34 37 2e 36 36 33 68 2d 33 32 2e 38 32 35 6c 2d 33 37 2e 34 30 33 20 34 33 2e 39 33 76 2d 39 36 2e 39 38 32 6c 2d 32 39 2e 34 38 20 33 2e 38 36 34 76 31 35 31 2e Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1090" height="360" fill="none" viewBox="0 0 1090 360"> <path fill="#0866FF" d="M881.583 257.897h29.48v-47.696l41.137 47.696h36.072l-47.89-54.969 40.909-47.663h-32.825l-37.403 43.93v-96.982l-29.48 3.864v151.
2024-10-13 16:03:49 UTC	1171	IN	Data Raw: 32 38 20 35 33 2e 39 32 39 20 35 36 2e 34 36 32 20 35 33 2e 39 32 39 20 31 37 2e 34 36 37 20 30 20 33 34 2e 34 34 38 2d 35 2e 38 34 34 20 34 35 2e 30 36 35 2d 31 35 2e 35 35 32 6c 2d 31 30 2e 36 31 37 2d 31 38 2e 37 30 31 63 2d 31 30 2e 32 39 32 20 37 2e 31 31 2d 32 30 2e 33 39 20 31 30 2e 34 35 34 2d 33 31 2e 34 39 34 20 31 30 2e 34 35 34 5a 6d 2d 36 2e 35 39 31 2d 36 31 2e 31 33 37 63 31 33 2e 36 33 37 20 30 20 32 32 2e 33 33 38 20 38 2e 32 37 39 20 32 32 2e 33 33 38 20 32 31 2e 31 30 34 76 2e 30 39 38 68 2d 34 37 2e 30 37 38 63 32 2e 38 32 35 2d 31 33 2e 36 30 34 20 31 31 2e 36 32 33 2d 32 31 2e 32 30 32 20 32 34 2e 37 34 2d 32 31 2e 32 30 32 5a 6d 2d 39 38 2e 39 39 34 20 38 34 2e 39 36 38 63 31 35 2e 32 36 20 30 20 33 30 2e 31 39 35 2d 35 2e 38 34 34 Data Ascii: 28 53.929 56.462 53.929 17.467 0 34.448-5.844 45.065-15.552l-10.617-18.701c-10.292 7.11-20.39 10.454-31.494 10.454Zm-6.591-61.137c13.637 0 22.338 8.279 22.338 21.104v.098h-47.078c2.825-13.604 11.623-21.202 24.74-21.202Zm-98.994 84.968c15.26 0 30.195-5.844

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49743	185.199.108.153	443	1368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:03:50 UTC	387	OUT	GET /facebook_login_page/images/infofacebook.svg HTTP/1.1 Host: ijazkhan09.github.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 16:03:50 UTC	742	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2549 Server: GitHub.com Content-Type: image/svg+xml permissions-policy: interest-cohort=() x-origin-cache: HIT Last-Modified: Sun, 13 Oct 2024 08:02:08 GMT Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31556952 ETag: "670b7e80-9f5" expires: Sun, 13 Oct 2024 16:13:49 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: 5A09:3B9574:2AF6F65:2F4D758:670BEF65 Accept-Ranges: bytes Date: Sun, 13 Oct 2024 16:03:50 GMT Via: 1.1 varnish Age: 1 X-Served-By: cache-ewr-kewr1740062-EWR X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1728835430.273086,VS0,VE1 Vary: Accept-Encoding X-Fastly-Request-ID: 4693f564a2dc27a56c27219134c7c62499b3ca4d
2024-10-13 16:03:50 UTC	1378	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 39 30 22 20 68 65 69 67 68 74 3d 22 33 36 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 39 30 20 33 36 30 22 3e 0a 20 20 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 30 38 36 36 46 46 22 20 64 3d 22 4d 38 38 31 2e 35 38 33 20 32 35 37 2e 38 39 37 68 32 39 2e 34 38 76 2d 34 37 2e 36 39 36 6c 34 31 2e 31 33 37 20 34 37 2e 36 39 36 68 33 36 2e 30 37 32 6c 2d 34 37 2e 38 39 2d 35 34 2e 39 36 39 20 34 30 2e 39 30 39 2d 34 37 2e 36 36 33 68 2d 33 32 2e 38 32 35 6c 2d 33 37 2e 34 30 33 20 34 33 2e 39 33 76 2d 39 36 2e 39 38 32 6c 2d 32 39 2e 34 38 20 33 2e 38 36 34 76 31 35 31 2e Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1090" height="360" fill="none" viewBox="0 0 1090 360"> <path fill="#0866FF" d="M881.583 257.897h29.48v-47.696l41.137 47.696h36.072l-47.89-54.969 40.909-47.663h-32.825l-37.403 43.93v-96.982l-29.48 3.864v151.
2024-10-13 16:03:50 UTC	1171	IN	Data Raw: 32 38 20 35 33 2e 39 32 39 20 35 36 2e 34 36 32 20 35 33 2e 39 32 39 20 31 37 2e 34 36 37 20 30 20 33 34 2e 34 34 38 2d 35 2e 38 34 34 20 34 35 2e 30 36 35 2d 31 35 2e 35 35 32 6c 2d 31 30 2e 36 31 37 2d 31 38 2e 37 30 31 63 2d 31 30 2e 32 39 32 20 37 2e 31 31 2d 32 30 2e 33 39 20 31 30 2e 34 35 34 2d 33 31 2e 34 39 34 20 31 30 2e 34 35 34 5a 6d 2d 36 2e 35 39 31 2d 36 31 2e 31 33 37 63 31 33 2e 36 33 37 20 30 20 32 32 2e 33 33 38 20 38 2e 32 37 39 20 32 32 2e 33 33 38 20 32 31 2e 31 30 34 76 2e 30 39 38 68 2d 34 37 2e 30 37 38 63 32 2e 38 32 35 2d 31 33 2e 36 30 34 20 31 31 2e 36 32 33 2d 32 31 2e 32 30 32 20 32 34 2e 37 34 2d 32 31 2e 32 30 32 5a 6d 2d 39 38 2e 39 39 34 20 38 34 2e 39 36 38 63 31 35 2e 32 36 20 30 20 33 30 2e 31 39 35 2d 35 2e 38 34 34 Data Ascii: 28 53.929 56.462 53.929 17.467 0 34.448-5.844 45.065-15.552l-10.617-18.701c-10.292 7.11-20.39 10.454-31.494 10.454Zm-6.591-61.137c13.637 0 22.338 8.279 22.338 21.104v.098h-47.078c2.825-13.604 11.623-21.202 24.74-21.202Zm-98.994 84.968c15.26 0 30.195-5.844

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49747	185.199.109.153	443	1368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:03:51 UTC	616	OUT	GET /favicon.ico HTTP/1.1 Host: ijazkhan09.github.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ijazkhan09.github.io/facebook_login_page/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 16:03:51 UTC	637	IN	HTTP/1.1 404 Not Found Connection: close Content-Length: 9115 Server: GitHub.com Content-Type: text/html; charset=utf-8 permissions-policy: interest-cohort=() ETag: "66faf066-239b" Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self' X-GitHub-Request-Id: 5A09:3B9574:2AF70F3:2F4D90E:670BEF65 Accept-Ranges: bytes Age: 0 Date: Sun, 13 Oct 2024 16:03:51 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740039-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1728835431.241758,VS0,VE18 Vary: Accept-Encoding X-Fastly-Request-ID: 91e82e130017cdbeb43a355439328da4588e803b
2024-10-13 16:03:51 UTC	1378	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 66 61 75 6c 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 73 74 79 6c 65 2d 73 72 63 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 3b 20 63 6f 6e 6e 65 63 74 2d 73 72 63 20 27 73 65 6c 66 27 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 Data Ascii: <!DOCTYPE html><html> <head> <meta http-equiv="Content-type" content="text/html; charset=utf-8"> <meta http-equiv="Content-Security-Policy" content="default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'"> <title>S
2024-10-13 16:03:51 UTC	1378	IN	Data Raw: 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 20 32 29 2c 0a 20 20 20 20 20 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 20 31 39 32 64 70 69 29 2c 0a 20 20 20 20 20 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 20 32 64 70 70 78 29 20 7b 0a 20 20 20 20 20 20 20 20 2e 6c 6f 67 6f 2d 69 6d 67 2d 31 78 20 7b 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 20 7d 0a 20 20 20 20 20 20 20 20 2e 6c 6f 67 6f 2d 69 6d 67 2d 32 78 20 7b 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 20 7d 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 23 73 75 Data Ascii: ice-pixel-ratio: 2), only screen and ( min-resolution: 192dpi), only screen and ( min-resolution: 2dppx) { .logo-img-1x { display: none; } .logo-img-2x { display: inline-block; } } #su
2024-10-13 16:03:51 UTC	1378	IN	Data Raw: 78 34 4f 6e 68 74 63 47 31 6c 64 47 45 67 65 47 31 73 62 6e 4d 36 65 44 30 69 59 57 52 76 59 6d 55 36 62 6e 4d 36 62 57 56 30 59 53 38 69 49 48 67 36 65 47 31 77 64 47 73 39 49 6b 46 6b 62 32 4a 6c 49 46 68 4e 55 43 42 44 62 33 4a 6c 49 44 55 75 4d 79 31 6a 4d 44 45 78 49 44 59 32 4c 6a 45 30 4e 54 59 32 4d 53 77 67 4d 6a 41 78 4d 69 38 77 4d 69 38 77 4e 69 30 78 4e 44 6f 31 4e 6a 6f 79 4e 79 41 67 49 43 41 67 49 43 41 67 49 6a 34 67 50 48 4a 6b 5a 6a 70 53 52 45 59 67 65 47 31 73 62 6e 4d 36 63 6d 52 6d 50 53 4a 6f 64 48 52 77 4f 69 38 76 64 33 64 33 4c 6e 63 7a 4c 6d 39 79 5a 79 38 78 4f 54 6b 35 4c 7a 41 79 4c 7a 49 79 4c 58 4a 6b 5a 69 31 7a 65 57 35 30 59 58 67 74 62 6e 4d 6a 49 6a 34 67 50 48 4a 6b 5a 6a 70 45 5a 58 4e 6a 63 6d 6c 77 64 47 6c 76 62 Data Ascii: x4OnhtcG1ldGEgeG1sbnM6eD0iYWRvYmU6bnM6bWV0YS8iIHg6eG1wdGs9IkFkb2JlIFhNUCBDb3JlIDUuMy1jMDExIDY2LjE0NTY2MSwgMjAxMi8wMi8wNi0xNDo1NjoyNyAgICAgICAgIj4gPHJkZjpSREYgeG1sbnM6cmRmPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5LzAyLzIyLXJkZi1zeW50YXgtbnMjIj4gPHJkZjpEZXNjcmlwdGlvb
2024-10-13 16:03:51 UTC	1378	IN	Data Raw: 45 39 46 4e 72 67 77 42 43 4c 69 72 4d 46 56 39 4f 6b 68 35 65 66 6c 46 68 38 50 52 35 6e 4b 35 6e 44 61 62 72 52 32 42 4e 4a 6c 4b 4f 30 54 33 35 2b 4c 69 34 6e 34 2b 2f 4a 2b 2f 4a 51 43 78 68 6d 75 35 68 33 75 4a 6f 58 4e 48 50 62 6d 57 5a 41 48 4d 73 68 57 42 38 6c 35 2f 69 70 71 61 6d 6d 61 41 66 30 7a 50 44 44 78 31 4f 4e 56 33 76 75 72 64 69 64 71 77 41 51 4c 2b 70 45 63 38 73 4c 63 41 65 31 43 43 76 51 33 59 48 78 49 57 38 50 6c 38 35 78 53 57 4e 43 31 68 41 44 44 49 76 30 72 49 45 2f 6f 34 4a 30 6b 33 6b 77 77 34 78 53 6c 77 49 68 63 71 33 45 46 46 4f 6d 37 4b 4e 2f 68 55 47 4f 51 6b 74 30 43 46 61 35 57 70 4e 4a 6c 4d 76 78 42 45 7a 2f 49 56 51 41 78 67 2f 5a 52 5a 6c 39 77 69 48 41 36 33 79 44 59 69 65 4d 37 44 6e 4c 50 35 43 69 41 47 73 43 37 Data Ascii: E9FNrgwBCLirMFV9Okh5eflFh8PR5nK5nDabrR2BNJlKO0T35+Li4n4+/J+/JQCxhmu5h3uJoXNHPbmWZAHMshWB8l5/ipqammaAf0zPDDx1ONV3vurdidqwAQL+pEc8sLcAe1CCvQ3YHxIW8Pl85xSWNC1hADDIv0rIE/o4J0k3kww4xSlwIhcq3EFFOm7KN/hUGOQkt0CFa5WpNJlMvxBEz/IVQAxg/ZRZl9wiHA63yDYieM7DnLP5CiAGsC7
2024-10-13 16:03:51 UTC	1378	IN	Data Raw: 62 32 4a 6c 49 46 68 4e 55 43 42 44 62 33 4a 6c 49 44 55 75 4d 79 31 6a 4d 44 45 78 49 44 59 32 4c 6a 45 30 4e 54 59 32 4d 53 77 67 4d 6a 41 78 4d 69 38 77 4d 69 38 77 4e 69 30 78 4e 44 6f 31 4e 6a 6f 79 4e 79 41 67 49 43 41 67 49 43 41 67 49 6a 34 67 50 48 4a 6b 5a 6a 70 53 52 45 59 67 65 47 31 73 62 6e 4d 36 63 6d 52 6d 50 53 4a 6f 64 48 52 77 4f 69 38 76 64 33 64 33 4c 6e 63 7a 4c 6d 39 79 5a 79 38 78 4f 54 6b 35 4c 7a 41 79 4c 7a 49 79 4c 58 4a 6b 5a 69 31 7a 65 57 35 30 59 58 67 74 62 6e 4d 6a 49 6a 34 67 50 48 4a 6b 5a 6a 70 45 5a 58 4e 6a 63 6d 6c 77 64 47 6c 76 62 69 42 79 5a 47 59 36 59 57 4a 76 64 58 51 39 49 69 49 67 65 47 31 73 62 6e 4d 36 65 47 31 77 50 53 4a 6f 64 48 52 77 4f 69 38 76 62 6e 4d 75 59 57 52 76 59 6d 55 75 59 32 39 74 4c 33 68 Data Ascii: b2JlIFhNUCBDb3JlIDUuMy1jMDExIDY2LjE0NTY2MSwgMjAxMi8wMi8wNi0xNDo1NjoyNyAgICAgICAgIj4gPHJkZjpSREYgeG1sbnM6cmRmPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5LzAyLzIyLXJkZi1zeW50YXgtbnMjIj4gPHJkZjpEZXNjcmlwdGlvbiByZGY6YWJvdXQ9IiIgeG1sbnM6eG1wPSJodHRwOi8vbnMuYWRvYmUuY29tL3h
2024-10-13 16:03:51 UTC	1378	IN	Data Raw: 74 34 32 66 2b 4d 70 30 79 55 54 56 51 62 64 57 73 41 48 56 73 69 6b 64 69 48 6b 48 61 50 78 63 51 58 51 75 66 58 67 55 42 67 4d 52 78 6d 65 39 55 30 41 41 78 66 48 34 76 46 76 6a 4d 37 65 46 36 55 6b 62 4a 53 35 71 6f 51 77 45 51 47 41 35 37 41 63 35 4a 6c 6c 46 79 55 56 5a 5a 35 63 6b 55 45 67 4d 56 78 73 4b 32 6a 6c 53 59 7a 49 2b 51 58 4a 73 69 79 6a 7a 4e 45 41 4a 79 4a 41 7a 62 2f 4b 51 61 34 31 6a 4a 4b 4c 38 70 4f 44 4d 51 69 54 45 41 79 6d 58 77 35 6e 38 2f 50 30 49 6a 44 33 62 68 37 52 67 6f 67 35 39 61 61 6e 78 69 49 52 54 56 76 56 2f 6f 6a 30 74 6e 48 63 61 2f 57 4d 72 56 77 4f 44 77 42 33 72 61 54 47 78 7a 6b 42 67 2f 67 6e 5a 56 61 70 46 56 36 32 57 79 32 6e 35 41 4f 37 30 48 4d 2f 35 77 62 4a 30 51 6e 58 79 51 53 61 56 50 44 49 75 4e 5a 7a Data Ascii: t42f+Mp0yUTVQbdWsAHVsikdiHkHaPxcQXQufXgUBgMRxme9U0AAxfH4vFvjM7eF6UkbJS5qoQwEQGA57Ac5JllFyUVZZ5ckUEgMVxsK2jlSYzI+QXJsiyjzNEAJyJAzb/KQa41jJKL8pODMQiTEAymXw5n8/P0IjD3bh7Rgog59aanxiIRTVvV/oj0tnHca/WMrVwODwB3raTGxzkBg/gnZVapFV62Wy2n5AO70HM/5wbJ0QnXyQSaVPDIuNZz
2024-10-13 16:03:51 UTC	847	IN	Data Raw: 36 73 64 34 32 39 54 55 4e 45 63 6d 55 64 63 2b 50 52 61 4c 48 63 76 6e 38 37 64 58 57 34 75 67 7a 64 73 61 47 78 75 66 4c 39 34 4e 46 76 39 7a 69 31 4a 37 47 56 62 68 6c 76 62 32 64 6e 61 4a 33 53 56 72 78 66 63 2b 6e 32 2b 4e 54 73 5a 37 2f 48 37 2f 4d 72 33 67 35 58 64 53 49 48 79 4a 53 48 31 50 5a 2b 37 66 54 6f 79 6c 32 2b 45 72 71 69 6c 67 5a 34 4e 61 4c 59 42 39 67 6f 56 47 61 48 6a 52 39 33 48 76 31 5a 72 55 34 58 44 73 46 54 32 30 6b 48 33 50 4f 62 7a 62 57 6b 30 43 67 47 31 6a 61 63 56 49 55 6e 41 51 62 39 46 2b 56 65 78 79 4c 4d 7a 6b 70 63 4c 76 30 49 4a 56 37 41 48 51 49 4f 43 41 55 59 48 78 37 76 35 71 67 53 63 6d 59 48 74 54 71 53 41 79 5a 4c 45 4a 54 4b 32 32 42 69 65 34 69 71 33 78 73 71 70 6d 34 53 41 66 39 48 71 39 61 32 44 6e 4a 34 75 Data Ascii: 6sd429TUNEcmUdc+PRaLHcvn87dXW4ugzdsaGxufL94NFv9zi1J7GVbhlvb2dnaJ3SVrxfc+n2+NTsZ7/H7/Mr3g5XdSIHyJSH1PZ+7fToyl2+ErqilgZ4NaLYB9goVGaHjR93Hv1ZrU4XDsFT20kH3PObzbWk0CgG1jacVIUnAQb9F+VexyLMzkpcLv0IJV7AHQIOCAUYHx7v5qgScmYHtTqSAyZLEJTK22Bie4iq3xsqpm4SAf9Hq9a2DnJ4u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49748	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:03:51 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-13 16:03:52 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=175303 Date: Sun, 13 Oct 2024 16:03:52 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49749	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:03:52 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-13 16:03:53 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=175243 Date: Sun, 13 Oct 2024 16:03:53 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-13 16:03:53 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49757	185.199.109.153	443	1368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:08 UTC	751	OUT	GET /facebook_login_page/? HTTP/1.1 Host: ijazkhan09.github.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://ijazkhan09.github.io/facebook_login_page/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 16:04:08 UTC	755	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1237 Server: GitHub.com Content-Type: text/html; charset=utf-8 permissions-policy: interest-cohort=() x-origin-cache: HIT Last-Modified: Sun, 13 Oct 2024 08:02:08 GMT Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31556952 ETag: "670b7e80-4d5" expires: Sun, 13 Oct 2024 16:14:08 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: 92D3:333CEF:2A72376:2EC8C68:670BEF78 Accept-Ranges: bytes Age: 0 Date: Sun, 13 Oct 2024 16:04:08 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740033-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1728835449.571788,VS0,VE13 Vary: Accept-Encoding X-Fastly-Request-ID: 346697a69d0b79394a6baa46083056a26a0974cb
2024-10-13 16:04:08 UTC	1237	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 46 61 63 65 62 6f 6f 6b 20 4c 6f 67 69 6e 20 7c 20 50 61 67 65 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 73 74 79 6c 65 2e 63 73 73 22 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 73 65 63 74 69 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Facebook Login \| Page</title> <link rel="stylesheet" href="style.css"></head><body> <secti

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.4	49763	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:43 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:43 UTC	540	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:43 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Sat, 12 Oct 2024 04:31:01 GMT ETag: "0x8DCEA76AD821850" x-ms-request-id: 5e3cf53f-d01e-007a-3ba0-1cf38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160443Z-17db6f7c8cfvzwz27u5rnq9kpc00000005eg000000006emz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:43 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-13 16:04:43 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-13 16:04:43 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-13 16:04:43 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-13 16:04:43 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-13 16:04:43 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-13 16:04:43 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-13 16:04:43 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-13 16:04:43 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-13 16:04:43 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.4	49768	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:44 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:44 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:44 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: a65062bf-401e-00ac-0ea3-1b0a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160444Z-17db6f7c8cfbd7pgux3k6qfa6000000003x000000000f8c4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:44 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.4	49765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:44 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:44 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:44 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 9229949d-801e-008c-498a-1b7130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160444Z-17db6f7c8cf6qp7g7r97wxgbqc00000004hg000000001aq7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:44 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.4	49766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:44 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:44 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:44 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 6472af2a-e01e-00aa-15e5-1cceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160444Z-17db6f7c8cfmhggkx889x958tc00000002d0000000000ry5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:44 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	49764	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:44 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:44 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:44 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: ced16f83-c01e-008e-1322-1b7381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160444Z-17db6f7c8cfhzb2znbk0zyvf6n00000004sg00000000a9dd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:44 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	49767	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:44 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:44 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:44 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 695c64e8-001e-0034-5de7-1add04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160444Z-17db6f7c8cfhzb2znbk0zyvf6n00000004tg0000000094mw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:44 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	49769	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:45 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:45 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:45 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 6aeebda2-001e-008d-31ea-1ad91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160445Z-17db6f7c8cfqkqk8bn4ck6f72000000004ug00000000d0nk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:45 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	49770	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:45 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:45 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:45 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 6c20420a-501e-008f-0947-1c9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160445Z-17db6f7c8cf9c22xp43k2gbqvn00000002qg00000000bbqq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:45 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	49771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:45 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:45 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:45 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 999224e7-101e-0079-39d7-1a5913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160445Z-17db6f7c8cfvzwz27u5rnq9kpc00000005c000000000aqd2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:45 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:45 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:45 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:45 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 0e59abf9-f01e-003c-2b47-1c8cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160445Z-17db6f7c8cfcl4jvqfdxaxz9w800000002gg000000007xwe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:45 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:45 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:45 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:45 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: dbc5b3b7-c01e-00a2-28e5-1a2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160445Z-17db6f7c8cfqxt4wrzg7st2fm800000005ag000000000vgq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:45 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:46 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:46 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:46 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: c9e2a668-e01e-001f-5fd7-1a1633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160446Z-17db6f7c8cfq2j6f03aq9y8dns000000047000000000e63t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:46 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:46 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:46 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:46 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 3bab7c63-901e-008f-7e58-1d67a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160446Z-17db6f7c8cfpm9w8b1ybgtytds00000002y000000000ega6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:46 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49776	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:46 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:46 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:46 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: c03f5215-301e-005d-4a1d-1ce448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160446Z-17db6f7c8cf6f7vv3recfp4a6w0000000250000000008pk3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:46 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:46 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:46 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:46 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: e9ae6f2c-401e-0035-2e04-1c82d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160446Z-17db6f7c8cf4g2pjavqhm24vp4000000059g000000009mry x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:46 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:46 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:46 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:46 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: daf35764-401e-008c-13df-1b86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160446Z-17db6f7c8cfvtw4hh2496wp8p800000003hg000000007phn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:46 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:46 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:46 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:46 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: b85ce019-d01e-0028-4fe2-1a7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160446Z-17db6f7c8cfspvtq2pgqb2w5k000000004yg00000000byt1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:46 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:46 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:46 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:46 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 23cc8f65-401e-0048-2a25-1c0409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160446Z-17db6f7c8cf8rgvlb86c9c0098000000034000000000db30 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:46 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:47 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:47 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:47 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 55879866-201e-0033-5b1c-1cb167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160447Z-17db6f7c8cfjxfnba42c5rukwg0000000250000000003752 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:47 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:47 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:47 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:47 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 69053910-001e-00ad-4022-1b554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160447Z-17db6f7c8cf6qp7g7r97wxgbqc00000004e00000000085mp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:47 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:47 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:47 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:47 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 5355bdce-701e-0021-10ea-1a3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160447Z-17db6f7c8cf96l6t7bwyfgbkhw000000048000000000002f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:47 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:47 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:47 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:47 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 555a530f-b01e-0070-599c-1b1cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160447Z-17db6f7c8cfgqlr45m385mnngs00000003p0000000009hba x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:47 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:47 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:47 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:47 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 94304cac-901e-0048-809f-1bb800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160447Z-17db6f7c8cf9c22xp43k2gbqvn00000002n000000000f3vp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:47 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:47 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:48 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:47 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: ec733f58-401e-0035-529c-1b82d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160447Z-17db6f7c8cf6f7vv3recfp4a6w000000024000000000baf7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:48 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:47 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:48 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:47 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 11c3f343-501e-0078-0139-1c06cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160447Z-17db6f7c8cf9c22xp43k2gbqvn00000002tg0000000050zw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:48 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:47 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:48 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:48 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: b910d997-a01e-0002-0816-1c5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160448Z-17db6f7c8cfvtw4hh2496wp8p800000003p0000000000hnm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:48 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:48 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:48 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:48 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 483006ab-801e-0035-465b-1c752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160448Z-17db6f7c8cfqkqk8bn4ck6f72000000004ug00000000d0sk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:48 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:48 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:48 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:48 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 3776c2af-901e-0048-1a6f-1cb800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160448Z-17db6f7c8cffhvbz3mt0ydz7x4000000039g000000009u8z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:48 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:48 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:48 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:48 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 6ec52d65-901e-0083-299c-1bbb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160448Z-17db6f7c8cf6qp7g7r97wxgbqc00000004b000000000cpq5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:48 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:48 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:48 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:48 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 9dc98f41-601e-0097-4647-1cf33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160448Z-17db6f7c8cfjxfnba42c5rukwg000000020000000000dq3s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:48 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:48 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:48 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:48 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 1507c9f1-d01e-007a-72eb-1af38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160448Z-17db6f7c8cfbd7pgux3k6qfa6000000004000000000096a1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:48 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:49 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:49 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:49 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 1375d82d-b01e-0084-53a9-1cd736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160449Z-17db6f7c8cfgqlr45m385mnngs00000003m000000000dxfg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:49 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:49 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:49 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:49 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 1734d22f-801e-0067-0a1a-1cfe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160449Z-17db6f7c8cfvtw4hh2496wp8p800000003m00000000056ec x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:49 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:49 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:49 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:49 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 0a475807-001e-00a2-0116-1cd4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160449Z-17db6f7c8cfspvtq2pgqb2w5k000000004xg00000000eks2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:49 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:49 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:49 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:49 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: d28b635f-001e-0079-686d-1c12e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160449Z-17db6f7c8cf6f7vv3recfp4a6w000000021g00000000f81w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:49 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:50 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:50 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:50 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 49fa3939-001e-0017-20cd-1a0c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160450Z-17db6f7c8cfhzb2znbk0zyvf6n00000004vg000000003tq3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:50 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:50 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:50 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:50 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 65388d65-201e-0051-79ef-1a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160450Z-17db6f7c8cfwtn5x6ye8p8q9m000000003kg00000000f4h5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:50 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:50 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:50 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:50 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 38f28e88-001e-0046-4a22-1bda4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160450Z-17db6f7c8cfnqpbkckdefmqa44000000052000000000d8gk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:50 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:50 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:50 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:50 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: e9bc8845-c01e-008d-06d9-1a2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160450Z-17db6f7c8cf96l6t7bwyfgbkhw000000040g00000000f3p5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:50 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:50 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:50 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:50 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 5aec4ebb-b01e-0002-57ca-1a1b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160450Z-17db6f7c8cfhzb2znbk0zyvf6n00000004v0000000005dkk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:50 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:50 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:51 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:50 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 0fbb1da2-e01e-0085-1521-1cc311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160450Z-17db6f7c8cf5mtxmr1c51513n0000000058g00000000avze x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:51 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:51 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:51 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:51 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 725817be-301e-0052-7ede-1a65d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160451Z-17db6f7c8cfspvtq2pgqb2w5k000000004wg00000000fq5e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:51 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:51 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:51 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:51 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: c027d4fd-301e-005d-2016-1ce448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160451Z-17db6f7c8cf8rgvlb86c9c009800000003b000000000020k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:51 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:51 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:51 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:51 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 06589d36-d01e-0065-18bf-1ab77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160451Z-17db6f7c8cfbd7pgux3k6qfa6000000003xg00000000deuc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:51 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:51 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:51 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:51 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 9ba87e07-d01e-008e-2ae9-1a387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160451Z-17db6f7c8cfq2j6f03aq9y8dns000000048000000000c57b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:51 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:51 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:51 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:51 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 4508f1f3-f01e-0096-78e2-1a10ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160451Z-17db6f7c8cfqxt4wrzg7st2fm800000005ag000000000vpm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:51 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:51 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:51 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:51 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 77f86656-001e-000b-08e7-1a15a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160451Z-17db6f7c8cfgqlr45m385mnngs00000003hg00000000h9kd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:51 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:52 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:52 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:52 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 01727dbb-701e-0032-7b9f-1ba540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160452Z-17db6f7c8cfhrxld7punfw920n00000003w0000000007fux x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:52 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:52 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:52 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:52 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 24993946-c01e-008e-55d7-1a7381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160452Z-17db6f7c8cfspvtq2pgqb2w5k0000000051g000000004tn5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:52 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:52 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:52 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:52 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: b8f0ecbf-701e-005c-16e0-1abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160452Z-17db6f7c8cfhrxld7punfw920n00000003rg00000000g9uc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:52 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:52 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:52 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:52 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 1a8c6729-d01e-0014-7547-1ced58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160452Z-17db6f7c8cf9wwz8ehu7c5p33g000000028g00000000ffh7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:52 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:52 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:52 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:52 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: b9724e67-901e-00ac-7bd7-1ab69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160452Z-17db6f7c8cf5mtxmr1c51513n0000000058g00000000aw1p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:52 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:53 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:53 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:53 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 7a29fcb1-e01e-0003-091e-1c0fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160453Z-17db6f7c8cfvq8pt2ak3arkg6n00000002zg00000000ft44 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:53 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:53 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:53 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:53 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 150221b2-d01e-007a-13e9-1af38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160453Z-17db6f7c8cfbd7pgux3k6qfa60000000041g000000005ukr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:53 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:53 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:53 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:53 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: a2dd0523-901e-0064-1fe2-1ae8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160453Z-17db6f7c8cf5mtxmr1c51513n0000000059g0000000097ty x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:53 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:53 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:53 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:53 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: a45e7bac-201e-003c-72f3-1a30f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160453Z-17db6f7c8cfspvtq2pgqb2w5k0000000052g000000002bsk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:53 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:53 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:53 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:53 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 8f8e431e-b01e-0097-6fac-1b4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160453Z-17db6f7c8cfpm9w8b1ybgtytds000000030g000000009xnp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:53 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49822	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:53 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:54 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:54 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: d286cfb1-001e-0079-076b-1c12e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160454Z-17db6f7c8cfqkqk8bn4ck6f72000000004ug00000000d116 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:54 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:53 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:54 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:54 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: e64af527-401e-0015-1bcc-1a0e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160454Z-17db6f7c8cfnqpbkckdefmqa44000000057g000000000z52 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:54 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:54 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:54 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:54 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 640ec2fa-901e-0083-59e1-1abb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160454Z-17db6f7c8cfbr2wt66emzt78g400000004n000000000ae1s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:54 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:54 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:54 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:54 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 23e49b38-a01e-001e-1147-1c49ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160454Z-17db6f7c8cfvq8pt2ak3arkg6n000000035g000000003tbs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:54 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:54 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:54 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:54 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: fa8e6f2c-a01e-0021-6514-1c814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160454Z-17db6f7c8cfpm9w8b1ybgtytds0000000340000000002ubd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:54 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:54 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:54 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:54 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: d2b2f6f8-f01e-0085-0622-1c88ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160454Z-17db6f7c8cf6f7vv3recfp4a6w0000000290000000000p3n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:54 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:54 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:54 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:54 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: a84dc0aa-d01e-002b-1b83-1b25fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160454Z-17db6f7c8cf96l6t7bwyfgbkhw000000045g000000005qt8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:54 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:54 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:54 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:54 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 87870bf5-e01e-0003-2985-1d0fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160454Z-17db6f7c8cfgqlr45m385mnngs00000003hg00000000h9nr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:54 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:54 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:55 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:54 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: c0a86c07-d01e-007a-0a2f-1cf38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160454Z-17db6f7c8cfjxfnba42c5rukwg0000000240000000005xax x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:55 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49831	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:55 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:55 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:55 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 24028bf8-401e-00a3-4b1c-1c8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160455Z-17db6f7c8cfvtw4hh2496wp8p800000003ng000000001pd5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:55 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:55 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:55 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:55 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: a0500a35-c01e-002b-5eef-1a6e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160455Z-17db6f7c8cfqxt4wrzg7st2fm800000005ag000000000vsz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:55 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49833	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:55 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:55 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:55 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 69457385-001e-0034-42de-1add04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160455Z-17db6f7c8cf96l6t7bwyfgbkhw000000040g00000000f3yb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:55 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:55 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:55 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:55 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: ca6815b7-a01e-0053-63aa-1c8603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160455Z-17db6f7c8cfjxfnba42c5rukwg00000001z000000000gh8q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:55 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49835	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:55 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:55 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:55 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: eb876971-601e-0001-084f-1cfaeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160455Z-17db6f7c8cf9wwz8ehu7c5p33g00000002g0000000000cmf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:55 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:55 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:56 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:55 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 959f4817-801e-0078-5157-1cbac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160455Z-17db6f7c8cf6f7vv3recfp4a6w000000027g000000003vt9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:56 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:56 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:56 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:56 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 0588c624-801e-0048-72e0-1af3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160456Z-17db6f7c8cf4g2pjavqhm24vp4000000058g00000000d4bk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:56 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:56 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:56 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:56 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 67009796-e01e-0085-29b5-1cc311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160456Z-17db6f7c8cf6f7vv3recfp4a6w000000021g00000000f887 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:56 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:56 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:56 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:56 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: a41636a0-e01e-0051-20e2-1a84b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160456Z-17db6f7c8cfspvtq2pgqb2w5k0000000051000000000610k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:56 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:56 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:56 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:56 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 36d40921-f01e-0085-6daa-1c88ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160456Z-17db6f7c8cfspvtq2pgqb2w5k000000004vg00000000hqtz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:56 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:56 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:56 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:56 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 745077d4-d01e-0082-7c4a-1ce489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160456Z-17db6f7c8cf6f7vv3recfp4a6w000000022000000000f06v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:56 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:57 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:57 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:57 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 1a8c6bd5-d01e-0014-0747-1ced58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160457Z-17db6f7c8cf5mtxmr1c51513n0000000059g0000000097ys x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:57 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:57 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:57 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:57 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: f76b9983-801e-0047-0eec-1a7265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160457Z-17db6f7c8cf6qp7g7r97wxgbqc00000004k00000000002pc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:57 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:57 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:57 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:57 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 4988e983-001e-0082-750c-1c5880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160457Z-17db6f7c8cf8rgvlb86c9c009800000003700000000088wp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:57 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:57 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:57 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:57 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 2551f31e-501e-00a3-36a9-1cc0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160457Z-17db6f7c8cfmhggkx889x958tc00000002cg000000001r5r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:57 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:57 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:57 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:57 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 0cb7a61f-501e-0064-6562-1c1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160457Z-17db6f7c8cf9c22xp43k2gbqvn00000002p000000000dtyh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:57 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:57 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:57 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:57 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 46e4659a-701e-000d-2947-1c6de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160457Z-17db6f7c8cf9c22xp43k2gbqvn00000002sg000000008feu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:57 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:57 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:58 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:57 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 4dc67717-001e-005a-3747-1cc3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160457Z-17db6f7c8cf4g2pjavqhm24vp400000005d0000000002dfb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:58 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:57 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:58 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:57 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 3704a696-901e-0048-3641-1cb800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160457Z-17db6f7c8cfhrxld7punfw920n00000003yg000000001u3w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:58 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:57 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:58 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:58 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: defb5908-e01e-0033-2de2-1a4695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160458Z-17db6f7c8cf4g2pjavqhm24vp400000005cg0000000048g6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:58 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:58 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:58 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:58 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: f5c8f5dd-801e-0083-6721-1cf0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160458Z-17db6f7c8cfvq8pt2ak3arkg6n0000000350000000005260 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:58 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:58 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:58 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:58 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: d1236033-501e-008f-33ea-1a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160458Z-17db6f7c8cf6qp7g7r97wxgbqc00000004c000000000ct8g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:58 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:58 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:58 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:58 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 2ae1a5cc-001e-0046-231b-1cda4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160458Z-17db6f7c8cfvtw4hh2496wp8p800000003hg000000007pzx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:58 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:58 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:58 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:58 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: f0eac77b-f01e-00aa-541b-1c8521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160458Z-17db6f7c8cffhvbz3mt0ydz7x4000000039g000000009uqk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:58 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:59 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:59 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:59 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: b7d01dc4-701e-0032-5f3b-1ca540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160459Z-17db6f7c8cf9wwz8ehu7c5p33g00000002eg00000000443c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:59 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:59 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:59 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:59 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: eb4d8ac2-801e-008f-2a87-1b2c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160459Z-17db6f7c8cfwtn5x6ye8p8q9m000000003ng00000000brty x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:59 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:59 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:59 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:59 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 745fe90a-101e-005a-7f69-1c882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160459Z-17db6f7c8cfvzwz27u5rnq9kpc000000059g00000000fwnd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:59 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:59 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:59 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:59 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: efbad5a3-301e-0000-2ec0-1aeecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160459Z-17db6f7c8cfnqpbkckdefmqa44000000056g000000003086 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:59 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:04:59 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:04:59 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:04:59 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 3f82dd78-601e-005c-4797-1bf06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160459Z-17db6f7c8cfhrxld7punfw920n00000003t000000000d7et x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:04:59 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:05:00 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:05:00 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:05:00 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 234b0266-801e-0035-5da3-1b752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160500Z-17db6f7c8cfpm9w8b1ybgtytds000000031g000000008dzv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:05:00 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49862	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:05:00 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:05:00 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:05:00 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: fe1a38a0-a01e-0053-6ad8-1a8603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160500Z-17db6f7c8cfvzwz27u5rnq9kpc00000005cg00000000b5xd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:05:00 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:05:00 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:05:00 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:05:00 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: c0002b7f-501e-0029-6e1c-1cd0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160500Z-17db6f7c8cfcl4jvqfdxaxz9w800000002m0000000003ggu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:05:00 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49863	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:05:00 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:05:00 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:05:00 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: e2d37e80-101e-0079-6257-1c5913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160500Z-17db6f7c8cfjxfnba42c5rukwg000000026g00000000003q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:05:00 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49864	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:05:00 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:05:00 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:05:00 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 35289574-d01e-00ad-2923-1be942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160500Z-17db6f7c8cf96l6t7bwyfgbkhw000000042g00000000bys6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:05:00 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49865	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:05:00 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:05:01 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:05:00 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 44110a29-201e-00aa-4c81-1a3928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160500Z-17db6f7c8cfqxt4wrzg7st2fm8000000054000000000erp1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:05:01 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:05:01 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:05:01 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:05:01 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: fa68fd7e-e01e-0099-0ae2-1ada8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160501Z-17db6f7c8cf6qp7g7r97wxgbqc00000004e000000000863b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:05:01 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49867	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:05:01 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:05:01 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:05:01 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 824149a8-601e-003e-2114-1c3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160501Z-17db6f7c8cfvq8pt2ak3arkg6n000000035g000000003twn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:05:01 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49868	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:05:01 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:05:01 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:05:01 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: f4958516-001e-00a2-15de-1ad4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160501Z-17db6f7c8cfhrxld7punfw920n00000003v0000000009yxy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:05:01 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49869	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:05:01 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:05:01 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:05:01 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: d113afee-501e-008f-14e4-1a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160501Z-17db6f7c8cf5mtxmr1c51513n000000005a00000000082f4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:05:01 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49871	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:05:01 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:05:01 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:05:01 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 5f90b282-c01e-00ad-7c2b-1ca2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160501Z-17db6f7c8cfvq8pt2ak3arkg6n00000002zg00000000ftem x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:05:01 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49872	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:05:01 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:05:01 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:05:01 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 7536bc90-101e-005a-6b87-1c882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160501Z-17db6f7c8cfhrxld7punfw920n00000003x00000000053ve x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:05:01 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49870	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:05:01 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:05:01 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:05:01 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: aa10c15c-401e-0067-377e-1b09c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160501Z-17db6f7c8cfp6mfve0htepzbps00000004kg0000000050zd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:05:01 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49874	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:05:01 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:05:02 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:05:01 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 5c04d847-901e-007b-6354-1cac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160501Z-17db6f7c8cfcrfgzd01a8emnyg00000002h000000000ecfy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:05:02 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49873	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:05:01 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:05:02 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:05:01 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 16892f44-001e-008d-0d14-1cd91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160501Z-17db6f7c8cfvtw4hh2496wp8p800000003eg00000000fxsk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:05:02 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49877	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:05:03 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:05:03 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:05:03 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: d1a23a3b-201e-0085-4ca2-1b34e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160503Z-17db6f7c8cfgqlr45m385mnngs00000003r0000000005de5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:05:03 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49876	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:05:03 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:05:03 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:05:03 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 1ebc5235-901e-00ac-1eed-1bb69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160503Z-17db6f7c8cfgqlr45m385mnngs00000003t0000000000pg2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:05:03 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49879	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:05:03 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:05:03 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:05:03 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 0d61edcd-501e-0064-4ca2-1c1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160503Z-17db6f7c8cf9wwz8ehu7c5p33g000000029000000000f831 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:05:03 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49878	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:05:03 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:05:03 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:05:03 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: df344972-701e-001e-12cd-1af5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160503Z-17db6f7c8cfq2j6f03aq9y8dns000000047000000000e6ry x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:05:03 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49875	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:05:03 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:05:03 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:05:03 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 540e34d0-301e-0096-5f1b-1ce71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160503Z-17db6f7c8cfpm9w8b1ybgtytds000000034g000000001gga x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:05:03 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49883	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:05:04 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:05:04 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:05:04 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: d184da79-201e-0085-6797-1b34e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160504Z-17db6f7c8cf6qp7g7r97wxgbqc00000004b000000000cq7v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:05:04 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49884	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:05:04 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:05:04 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:05:04 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: c21fd998-001e-0014-4ce5-1a5151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160504Z-17db6f7c8cfq2j6f03aq9y8dns00000004a00000000081ar x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:05:04 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49880	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:05:04 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:05:04 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:05:04 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: c08f385d-301e-0033-1fca-1afa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160504Z-17db6f7c8cf5mtxmr1c51513n0000000056g00000000f2tm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:05:04 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49881	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:05:04 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:05:04 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:05:04 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 0506fa48-b01e-001e-4cc1-1a0214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160504Z-17db6f7c8cfspvtq2pgqb2w5k00000000500000000008em7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:05:04 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49882	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:05:04 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:05:04 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:05:04 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: c0003111-501e-0029-3e1c-1cd0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160504Z-17db6f7c8cf8rgvlb86c9c009800000003b00000000002hy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:05:04 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49886	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:05:05 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:05:05 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:05:05 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 056f3a33-b01e-0097-671a-1c4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160505Z-17db6f7c8cfhrxld7punfw920n00000003t000000000d7sg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:05:05 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49889	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:05:05 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:05:05 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:05:05 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 83ee3589-001e-00ad-137e-1b554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160505Z-17db6f7c8cfhrxld7punfw920n00000003y0000000002x51 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:05:05 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49887	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:05:05 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:05:05 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:05:05 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: e2476cc5-001e-00ad-1ecd-1a554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160505Z-17db6f7c8cfhzb2znbk0zyvf6n00000004w0000000003fdm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:05:05 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49885	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:05:05 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:05:05 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:05:05 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 5945a163-f01e-0096-22e9-1b10ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160505Z-17db6f7c8cfwtn5x6ye8p8q9m000000003pg000000008qvk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:05:05 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49888	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:05:05 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:05:05 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:05:05 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: d15b385d-801e-0047-591b-1c7265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160505Z-17db6f7c8cfqkqk8bn4ck6f72000000004vg00000000a3zc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:05:05 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49892	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:05:05 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:05:05 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:05:05 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 18adff54-401e-008c-27da-1a86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160505Z-17db6f7c8cf6qp7g7r97wxgbqc00000004k00000000002w5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:05:05 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49890	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:05:05 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:05:05 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:05:05 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 6eea93bb-701e-0097-0521-1bb8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160505Z-17db6f7c8cfbd7pgux3k6qfa6000000003w000000000h8cx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:05:05 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49891	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:05:05 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:05:05 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:05:05 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 7ec36ae7-901e-0064-7562-1ce8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160505Z-17db6f7c8cfvq8pt2ak3arkg6n000000032g00000000a8rr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:05:05 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49894	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:05:05 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:05:05 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:05:05 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 1384c3b0-d01e-0082-240e-1ce489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160505Z-17db6f7c8cfvtw4hh2496wp8p800000003p0000000000kbg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:05:05 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49893	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:05:05 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:05:06 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:05:05 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 374dd3c9-a01e-006f-2dec-1a13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160505Z-17db6f7c8cf6qp7g7r97wxgbqc00000004g0000000004gw1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:05:06 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49895	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:05:06 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:05:06 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:05:06 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 63590950-201e-0085-2bd8-1a34e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160506Z-17db6f7c8cfspvtq2pgqb2w5k000000004wg00000000fqve x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:05:06 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49896	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:05:06 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:05:06 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:05:06 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: 4eeac0e9-d01e-0066-085b-1cea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160506Z-17db6f7c8cf6qp7g7r97wxgbqc00000004eg000000006ppd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:05:06 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49897	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:05:06 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:05:06 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:05:06 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 17ba822c-f01e-001f-0875-1a5dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160506Z-17db6f7c8cfhzb2znbk0zyvf6n00000004qg00000000f125 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:05:06 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49898	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:05:06 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:05:06 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:05:06 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: 7843ce7c-701e-0053-331e-1b3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160506Z-17db6f7c8cfspvtq2pgqb2w5k000000004y000000000dn9g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:05:06 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49899	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:05:06 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:05:06 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:05:06 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: cb98536f-301e-003f-4895-1b266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160506Z-17db6f7c8cfgqlr45m385mnngs00000003hg00000000ha22 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:05:06 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49901	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:05:07 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:05:07 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:05:07 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: d178e097-d01e-005a-72ac-1b7fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160507Z-17db6f7c8cfgqlr45m385mnngs00000003n000000000b1py x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:05:07 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49900	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:05:07 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:05:07 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:05:07 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: f43d683d-001e-0028-4147-1cc49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160507Z-17db6f7c8cfmhggkx889x958tc00000002bg0000000042qp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:05:07 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49902	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:05:07 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:05:07 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:05:07 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: 0a20bae4-d01e-005a-49d9-1a7fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160507Z-17db6f7c8cfbr2wt66emzt78g400000004rg000000002rr8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:05:07 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49903	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:05:07 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:05:07 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:05:07 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: 6a7281b4-d01e-008e-2ea3-1b387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160507Z-17db6f7c8cfq2j6f03aq9y8dns00000004b0000000006rfh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:05:07 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49904	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:05:07 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:05:07 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:05:07 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: 83695c77-e01e-001f-80c4-1a1633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160507Z-17db6f7c8cfhrxld7punfw920n00000003s000000000g3a9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:05:07 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	49905	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:05:08 UTC	192	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:05:08 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:05:08 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: b7844524-101e-0017-17eb-1a47c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160508Z-17db6f7c8cfqxt4wrzg7st2fm8000000057g0000000072bk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:05:08 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Target ID:	0
Start time:	12:03:41
Start date:	13/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	12:03:44
Start date:	13/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=2224,i,15737961466895962115,16571030443050912340,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	12:03:47
Start date:	13/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ijazkhan09.github.io/facebook_login_page"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://ijazkhan09.github.io/facebook_login_page/	LLM: Score: 9 Reasons: The brand 'Facebook' is a well-known social media platform with a legitimate domain of 'facebook.com'., The URL 'ijazkhan09.github.io' does not match the legitimate domain of Facebook., The URL is hosted on GitHub Pages, which is a common platform for hosting personal or project pages, not official brand pages., The presence of input fields for 'Email Address Or Phone Number' is typical for phishing attempts targeting Facebook credentials., The URL does not contain any direct association with Facebook, indicating a potential phishing attempt. DOM: 0.0.pages.csv
Source: https://ijazkhan09.github.io/facebook_login_page/?	LLM: Score: 9 Reasons: The brand 'Facebook' is a well-known social media platform with a legitimate domain of 'facebook.com'., The URL 'ijazkhan09.github.io' does not match the legitimate domain of Facebook., The URL is hosted on GitHub Pages, which is a common platform for hosting personal or project pages, not official brand pages., The presence of input fields for 'Email Address Or Phone Number' is suspicious as it mimics Facebook's login page, which is a common phishing tactic., The domain 'github.io' is not associated with Facebook, indicating a potential phishing attempt. DOM: 1.1.pages.csv

Source: https://ijazkhan09.github.io/facebook_login_page/	Page Title: Facebook Login \| Page
Source: https://ijazkhan09.github.io/facebook_login_page/	Page Title: Facebook Login \| Page
Source: https://ijazkhan09.github.io/facebook_login_page/?	Page Title: Facebook Login \| Page
Source: https://ijazkhan09.github.io/facebook_login_page/?	Page Title: Facebook Login \| Page

Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: 1.1.pages.csv, type: HTML

Source: https://ijazkhan09.github.io/facebook_login_page/	Matcher: Template: facebook matched
Source: https://ijazkhan09.github.io/facebook_login_page/?	Matcher: Template: facebook matched

Source: global traffic	HTTP traffic detected: GET /facebook_login_page HTTP/1.1Host: ijazkhan09.github.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /facebook_login_page/ HTTP/1.1Host: ijazkhan09.github.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /facebook_login_page/style.css HTTP/1.1Host: ijazkhan09.github.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ijazkhan09.github.io/facebook_login_page/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /facebook_login_page/images/infofacebook.svg HTTP/1.1Host: ijazkhan09.github.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ijazkhan09.github.io/facebook_login_page/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /facebook_login_page/images/infofacebook.svg HTTP/1.1Host: ijazkhan09.github.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ijazkhan09.github.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ijazkhan09.github.io/facebook_login_page/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /facebook_login_page/? HTTP/1.1Host: ijazkhan09.github.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://ijazkhan09.github.io/facebook_login_page/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: ijazkhan09.github.io
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://ijazkhan09.github.io/facebook_login_page

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 41

Chrome Cache Entry: 42

Chrome Cache Entry: 43

Chrome Cache Entry: 44

Chrome Cache Entry: 45

Chrome Cache Entry: 46

Chrome Cache Entry: 47

Chrome Cache Entry: 48

Chrome Cache Entry: 49

Chrome Cache Entry: 50

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 6036, Parent PID: 5468

General

Windows Analysis Report
https://ijazkhan09.github.io/facebook_login_page