Edit tour

Windows Analysis Report
http://account-update-amazon-gift-card-collection.9d6ihdz43.top/

Overview

General Information

Sample URL:	http://account-update-amazon-gift-card-collection.9d6ihdz43.top/
Analysis ID:	1532592
Tags:	openphish
Infos:

Detection

Score:	88
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

AI detected phishing page (G)

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for submitted file

Phishing site detected (based on favicon image match)

Phishing site detected (based on logo match)

HTML body contains password input but no form action

Invalid T&C link found

None HTTPS page querying sensitive user data (password, username or email)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6112 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2136 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2292 --field-trial-handle=2204,i,11017439816736766845,16285686206145544316,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6308 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://account-update-amazon-gift-card-collection.9d6ihdz43.top/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://account-update-amazon-gift-card-collection.9d6ihdz43.top/

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Multi AV Scanner detection for domain / URL

Source: account-update-amazon-gift-card-collection.9d6ihdz43.top

Virustotal: Detection: 12%

Perma Link

Multi AV Scanner detection for submitted file

Source: http://account-update-amazon-gift-card-collection.9d6ihdz43.top/

Virustotal: Detection: 12%

Perma Link

Phishing

AI detected phishing page

Source: http://account-update-amazon-gift-card-collection.9d6ihdz43.top/user/login	LLM: Score: 9 Reasons: The brand 'Amazon' is a well-known global e-commerce company., The URL 'account-update-amazon-gift-card-collection.9d6ihdz43.top' does not match the legitimate domain 'amazon.com'., The domain '9d6ihdz43.top' is suspicious and not associated with Amazon., The use of 'amazon' in the subdomain is a common phishing tactic to mislead users., The presence of multiple hyphenated words in the subdomain is indicative of phishing attempts., The domain extension '.top' is unusual for a legitimate Amazon site. DOM: 0.1.pages.csv
Source: http://account-update-amazon-gift-card-collection.9d6ihdz43.top/user/login	LLM: Score: 9 Reasons: The brand 'Amazon' is a well-known global e-commerce company., The URL 'account-update-amazon-gift-card-collection.9d6ihdz43.top' does not match the legitimate domain 'amazon.com'., The domain '9d6ihdz43.top' is suspicious and not associated with Amazon., The use of 'amazon' in the subdomain is a common phishing tactic to mislead users., The presence of multiple hyphenated words in the subdomain is indicative of phishing attempts., The domain extension '.top' is unusual for a legitimate Amazon site. DOM: 0.0.pages.csv

AI detected phishing page (G)

Source: http://account-update-amazon-gift-card-collection.9d6ihdz43.top/user/login	LLM: Score: 8 Reasons: The URL "account-update-amazon-gift-card-collection.9d6ihdz43.top" is highly suspicious. The domain name "9d6ihdz43.top" does not match the legitimate domain name "amazon.com" associated with Amazon., The URL contains several keywords related to account updates, gift cards, and collections, which are commonly used in phishing attempts to lure victims., The structure of the URL with multiple hyphens and a seemingly random subdomain is a strong indicator of a phishing attempt., The input field requesting an email or mobile phone number is a common tactic used by phishers to collect sensitive information. DOM: 0.1.pages.csv
Source: http://account-update-amazon-gift-card-collection.9d6ihdz43.top/user/login	LLM: Score: 8 Reasons: The URL "account-update-amazon-gift-card-collection.9d6ihdz43.top" is highly suspicious. The domain name "9d6ihdz43.top" does not match the legitimate domain name "amazon.com" associated with Amazon., The URL contains several keywords related to account updates, gift cards, and collections, which are commonly used in phishing attempts to lure victims., The structure of the URL with multiple hyphens and a seemingly random subdomain is a strong indicator of a phishing attempt., The input field requesting an email or mobile phone number is a common tactic used by phishers to collect sensitive information. DOM: 0.0.pages.csv

Phishing site detected (based on favicon image match)

Source: http://account-update-amazon-gift-card-collection.9d6ihdz43.top/user/login

Matcher: Template: amazon matched with high similarity

Phishing site detected (based on logo match)

Source: http://account-update-amazon-gift-card-collection.9d6ihdz43.top/user/login	Matcher: Template: amazon matched
Source: http://account-update-amazon-gift-card-collection.9d6ihdz43.top/user/login	Matcher: Template: amazon matched

Source: http://account-update-amazon-gift-card-collection.9d6ihdz43.top/user/login

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: http://account-update-amazon-gift-card-collection.9d6ihdz43.top/user/login	HTTP Parser: Invalid link: Need help?
Source: http://account-update-amazon-gift-card-collection.9d6ihdz43.top/user/login	HTTP Parser: Invalid link: Need help?

Source: http://account-update-amazon-gift-card-collection.9d6ihdz43.top/user/login

HTTP Parser: Has password / email / username input fields

Source: http://account-update-amazon-gift-card-collection.9d6ihdz43.top/user/login

HTTP Parser: <input type="password" .../> found

Source: http://account-update-amazon-gift-card-collection.9d6ihdz43.top/user/login	HTTP Parser: No <meta name="author".. found
Source: http://account-update-amazon-gift-card-collection.9d6ihdz43.top/user/login	HTTP Parser: No <meta name="author".. found

Source: http://account-update-amazon-gift-card-collection.9d6ihdz43.top/user/login	HTTP Parser: No <meta name="copyright".. found
Source: http://account-update-amazon-gift-card-collection.9d6ihdz43.top/user/login	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49858 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 41.63.96.128
Source: unknown	TCP traffic detected without corresponding DNS query: 41.63.96.128
Source: unknown	TCP traffic detected without corresponding DNS query: 41.63.96.128
Source: unknown	TCP traffic detected without corresponding DNS query: 41.63.96.128
Source: unknown	TCP traffic detected without corresponding DNS query: 41.63.96.128
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 13 Oct 2024 16:06:52 GMTServer: ApacheUpgrade: h2Connection: Upgrade, closeLast-Modified: Sun, 13 Oct 2024 08:38:13 GMTETag: "197-62457a41297c1-gzip"Accept-Ranges: bytesVary: Accept-EncodingContent-Encoding: gzipContent-Length: 284Content-Type: text/htmlData Raw: 1f 8b 08 00 00 00 00 00 00 03 5d 51 cb 4e c3 30 10 3c b7 5f 61 7c a6 09 41 95 0a 92 1d 09 f1 b8 c2 a1 1c 38 ba f6 b6 59 70 ec c8 bb a4 84 af c7 49 28 12 bd 78 35 eb d9 19 cf 5a 5d 3c 3c df 6f df 5e 1e 45 c3 ad af 97 6a 2c c2 9b 70 d0 12 82 ac 97 0b d5 80 71 b9 2e 54 0b 6c 84 6d 4c 22 60 2d 5f b7 4f ab 1b 29 ca e9 ca 63 f8 10 09 bc 96 68 63 90 a2 49 b0 d7 b2 dc 9b 7e c4 45 3e 4e cc 49 24 98 16 b4 ec 11 8e 5d 4c 2c 45 e6 30 84 2c 7a 44 c7 8d 76 90 c7 60 35 81 4b 81 01 19 8d 5f 91 35 1e 74 55 5c 9d a4 18 d9 43 7d d7 9a ef 18 54 39 a3 b1 4f 36 61 c7 82 87 2e 9b b4 d1 7d 7a c8 16 29 12 c5 84 07 0c 82 92 cd 8f 33 94 73 50 89 c1 c1 57 51 ed 6e af 61 b3 b1 c5 3b c9 5a 95 b3 c4 59 34 e2 c1 03 35 00 fc 17 f0 9f 06 54 d5 1a 2a b3 2e 2c d1 b4 b9 f2 77 75 6a 17 dd 30 89 39 ec 05 3a 2d 4d d7 8d 36 19 8e ed 91 3a 53 f2 c8 f4 0d 3f ba 23 70 d3 97 01 00 00 Data Ascii: ]QN0<_a\|A8YpI(x5Z]<<o^Ej,pq.TlmL"`-_O)chcI~E>NI$]L,E0,zDv`5K_5tU\C}T9O6a.}z)3sPWQna;ZY45T*.,wuj09:-M6:S?#p
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 13 Oct 2024 16:06:53 GMTServer: ApacheUpgrade: h2Connection: Upgrade, closeLast-Modified: Fri, 11 Oct 2024 08:41:34 GMTETag: "577e0-6242f74542b80-gzip"Accept-Ranges: bytesVary: Accept-EncodingContent-Encoding: gzipContent-Length: 49155Content-Type: text/cssData Raw: 1f 8b 08 00 00 00 00 00 00 03 ed bd 69 97 63 39 6e 28 f8 7d 7e c5 75 e5 a9 d3 a9 2a dd 68 2d 21 c5 76 aa 8e bb db 4b 7b e6 f9 cd cc f3 72 a6 a7 5d 8e 73 43 ba 8a 90 53 21 e9 49 8a cc c8 d2 e4 fb ed c3 9d 20 09 70 b9 52 d4 62 b7 cb 5d 95 a9 4b 82 00 48 82 20 00 02 7f 3d 7b 6a 76 fb f6 50 7d f5 2f ff fc 77 f5 f5 57 77 bf fd e6 af aa f5 66 f7 dc ac 96 3f b6 17 b3 fd be fa 78 7d 31 b8 18 56 ff 5f f5 8f ff f0 cf d5 7f 5b ce da f5 be 65 7f 7b 5c 1e 9e 5e 1e 2e 66 9b e7 df ae db d9 66 d5 ec 7f eb f6 fb e6 b7 4f 87 e7 d5 71 b5 5c b7 f5 53 bb 7c 7c 3a dc 0e 2f 86 93 bb fa 53 fb f0 61 79 a8 0f ed eb a1 de b3 d6 75 33 ff 8f 97 3d fb 3a 18 7c fd e5 61 33 ff 7c 7c 6e 76 8f cb f5 ed e0 cb 73 b3 5c 1f e7 cb fd 76 d5 7c be 7d 58 6d 66 1f be 3c 0d 8f 8b cd 5a f6 bc 1d b5 cf 77 aa f1 c5 f4 aa 7d ae 06 5f 9e 76 c7 87 cd 2b ff bc 5c 3f de ce 58 d3 96 b5 66 3f dd 29 24 06 77 9b 8f ed 6e b1 da 7c ba fd b8 dc 2f 1f 56 ed 97 ed ae 95 40 17 cd f3 72 f5 f9 f6 79 b3 de ec b7 cd ac ed 9b 3f dd d9 41 87 ed f3 97 e6 f8 d0 cc 3e 3c ee 36 2f eb 79 cd a8 df ec 6e 0f bb 66 cd 9a ee d8 70 5f 9a 87 87 dd 9f 0f cb c3 aa fd 81 61 b3 9b b7 3b 86 c1 e1 b0 79 be 5d 6f d6 ed 9d 20 7d ce b8 b6 6b 0e cb cd fa 96 01 69 77 9c 51 f4 97 6a ce fa b7 f3 2f 0f fd fd 61 b7 59 3f 4a 7c 3f 49 92 1e 36 2b d6 ec cb 6c 33 6f fb 1f 1e e6 fd 7d f3 bc 2d 24 68 cf 66 6e 05 38 7b cd e6 62 ff c2 46 7b d9 82 5f af 26 5f df c1 09 1d dc 6d 37 fb a5 c0 74 d7 ae 18 ca 1f db 3b c6 dc c3 72 d6 ac 6a b6 14 1e d7 b7 0f cd be e5 5d 38 b4 a3 62 42 7d 31 9a f0 31 19 ec c3 66 cb fe ca ff b6 7c 7e d4 bc da 1f 3e af 5a c1 aa 2f 0f 2f ac c7 ba bf 5c 6f 5f 0e fd cd f6 c0 59 be ed 33 90 ed ec d0 e7 dc 62 0c 6f 1c 5a 97 eb a7 76 b7 3c 40 fa d8 c2 ba 0b d6 a1 59 64 70 88 63 b0 36 d4 57 39 e2 51 cc 8f 98 e9 05 5b ec 0e 8a 7f 3e 7c de b6 df c9 bf fc a0 fe b6 6b d9 de d2 7f 61 0c 78 5e 1e 7e 38 ea 0d d0 6c b7 6d c3 40 cd da 5b d9 4b 41 ba bd ad 9f 37 3f d6 8b cd ec 65 5f 2f d7 eb 76 e7 c2 26 bf cb d1 c8 cf 6a fc f0 7b c8 f6 bb 6d 33 9f f3 fd a3 b9 03 fa ec d8 ef 1e 42 e8 47 85 0d fa 4d a3 e2 7e 3c 6e 5e 0e 7c 9a 6e 87 db 57 b5 de ab df 8b 21 fe 99 b1 fd cb 62 d9 ae e6 0c e6 51 23 77 31 66 eb a6 ba b8 12 ff 9e 8a 25 b5 6a 1f db f5 1c 4a 00 b3 fd 5e ef e4 3e d5 eb 43 8b 95 43 c3 a6 99 ad 86 d7 fa d3 72 7e 78 92 ab c5 d0 7f f7 e9 69 79 68 6b b1 65 6e a5 80 63 e2 62 f3 c8 a8 db 1f a9 a5 6e d6 a5 59 4d cd cb 61 f3 45 d2 3e 7b 6a 67 1f 18 3a 66 8d 34 f3 e5 e6 07 02 65 3b 0f b2 f1 fa e5 f9 a1 dd f1 39 54 8b 48 4c 20 43 6f b9 ae 9d 75 18 34 64 bc 75 1b 1e d5 66 00 a8 ed d9 7a 9c 3d a1 2b 94 93 24 26 e0 4e 4d 52 bd 59 2c d8 64 dc d6 a3 ed ab db dd 8e 29 7f 00 f2 0c 83 2c f6 90 ed b3 58 ae da fa 65 bb da 34 73 8d 28 b9 61 c4 1e d
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 13 Oct 2024 16:06:57 GMTServer: ApacheUpgrade: h2Connection: Upgrade, closeLast-Modified: Fri, 11 Oct 2024 08:41:34 GMTETag: "feb-6242f74542b80-gzip"Accept-Ranges: bytesVary: Accept-EncodingContent-Encoding: gzipContent-Length: 1041Content-Type: text/cssData Raw: 1f 8b 08 00 00 00 00 00 00 03 bd 57 4d 8f db 36 10 bd f7 57 b0 59 e4 66 1a 94 6c f9 83 3a 25 97 f4 d2 4b da 4b 51 04 01 2d 92 36 b1 94 28 50 f4 47 ba d8 ff de 21 65 d9 92 25 1b 5e 6f 10 e9 60 41 26 87 6f 66 de bc 19 8d f7 cc 16 78 65 0e ff 72 e6 18 de e1 d9 6a 2e 97 22 11 df 5e b8 aa 4a cd 7e 50 a9 c5 21 5d 19 cb 85 a5 95 d1 8a a3 a8 3c a0 a7 6c 4a e0 4a f7 8a bb 0d 9d 2c 48 e9 17 1d 70 a5 fe 53 c5 9a d6 eb bd e1 b4 64 9c fb 57 d1 14 b6 45 8b b2 31 86 2d e3 6a 5b 51 ff 26 67 76 ad 3c 0e e7 4c 4e a3 a4 3c bc 8e 1b 64 a8 7e 72 ca 69 d1 47 29 4d e1 fc a1 82 46 73 30 94 19 6d 2c 6d c0 d5 66 29 41 04 4d 4e 26 9d 38 b8 be 9d ce c6 5b 2b d1 58 68 ac 8a 72 eb be 7f df 5b 56 96 c2 be 74 a2 13 9f a3 f3 3a bc 5b 1a 9b 63 e5 44 fe d2 f5 fb da fa ee 69 63 55 81 85 6c 5b bd ac 58 f6 bc b6 66 5b 70 7c 84 2f e7 52 48 d9 04 f8 f8 92 90 79 b4 48 ea ec 6c 18 37 fb 10 90 10 12 00 ba 90 13 c9 46 24 24 35 40 27 32 82 2b 9e 21 55 54 c2 bd 8e 33 88 30 53 85 b0 fd a0 d5 c9 8f 08 f9 d8 5a 86 d8 cd 2c c5 e7 2c 11 32 9b 65 24 f5 61 c6 5c 64 c6 32 a7 4c 41 c1 1f 61 35 98 ba 6d 94 6e cc 0e 62 7f 4a 5c 92 90 3b 6d 8d 19 86 57 cf b8 80 3c 30 fd 4e b4 85 e9 19 2f 8c 4f d5 40 b8 36 90 74 5c 95 2c 13 b4 5e d3 d9 98 5b 1c 27 fd 5d 47 8e 58 b5 de 38 1a 87 d2 68 6d 72 a6 c4 37 32 d4 2b be eb 9b d1 78 5b 01 69 b4 81 d3 ae a5 7a 92 90 53 b5 02 8b d8 d6 99 b4 15 2d 60 54 ea 83 8d 37 22 a0 8d 96 e7 f0 01 a7 ea a5 92 e5 4a ff a0 7f 28 cb c0 8a 41 7f b1 a2 42 5f 3e 8f fe 54 99 35 95 91 0e fd c3 60 ff e8 93 55 4c 8f 2a f8 17 03 2e 25 ef 43 8e c6 f0 63 6e e3 3f a2 9b f8 e7 90 4e a6 d5 ba a0 99 28 9c b0 6d d1 b8 3f 60 f5 b1 48 e5 eb eb 55 32 b9 df d8 f9 79 58 9b 9b b4 c6 c4 57 ed 0c fc a8 0f 89 97 b3 93 be d2 20 d3 9c 73 14 74 29 1d 50 8b b3 54 9c b5 f8 31 88 68 0c a2 b6 16 0e 32 af 07 98 7f c4 8b b5 90 c0 8a 9f 73 0a ba 7e 0e 3d 4b ff a3 07 b1 50 a7 1e 73 05 1a 31 20 12 17 2d 0b 12 f1 bb ca 4b 63 1d 2b 5c d3 f3 9a 7f a1 f8 6a ee ef 6b e6 4d c9 cf 00 18 da 88 66 2b 71 15 1d c4 a1 e9 e2 aa 08 85 b9 d2 26 7b be 84 17 5f c0 9b 93 c7 51 65 19 30 cc 41 cb 92 03 45 78 44 15 58 0b d5 45 1e e6 c1 0e 14 58 94 a7 de 88 eb 86 d8 6e 96 aa 18 d4 c3 b7 b6 cc 53 21 d5 bd fd 89 cd fc dd ac ae 01 87 1d cb a9 bf 2f ca 69 d2 0c 45 4d db 0d 25 29 c3 b5 20 c7 a6 fb 44 c2 15 c5 75 c3 4d cd d6 f9 54 3d ce 8c e3 a3 1b 50 f1 b3 fb be fa f9 22 9a 5e 38 2e 33 1e 9f a6 ba 78 39 6d b5 bf 30 16 0c cc 6e 1d 07 fd 04 91 04 dd 49 f8 92 2f 17 0d cf 7d a8 de 55 f8 56 e4 22 5f 0d a5 b4 33 a7 06 25 0f b3 55 75 a1 e7 9e 6d a1 61 a1 f8 71 de 3d 69 b1 66 fa 6f e8 19 5f cd fe aa 26 34 be a6 dd 41 e2 c1 33 37 37 7c ae cb b9 e9 b6 e7 d1 ba ce 1f 69 f1 b4 4d 62 31 f7 77 bf 53 b7 e0 93 cb 91 7c fa 78 ea 40 4a 45 e6 67 a5 eb 82 9
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 13 Oct 2024 16:06:57 GMTServer: ApacheUpgrade: h2Connection: Upgrade, closeLast-Modified: Fri, 11 Oct 2024 08:41:34 GMTETag: "2c7-6242f74542b80-gzip"Accept-Ranges: bytesVary: Accept-EncodingContent-Encoding: gzipContent-Length: 373Content-Type: text/cssData Raw: 1f 8b 08 00 00 00 00 00 00 03 a5 91 3f 6f dc 30 0c c5 f7 7e 0a 17 5d 72 80 65 c8 77 96 0b c8 53 b2 b4 4b a7 4e 45 d1 81 27 cb 36 11 5b 14 68 e6 e2 34 f0 77 af ee cf 70 c1 35 5d 0a 0d 92 40 be 9f de a3 e0 67 0b 02 ea a0 ca da e8 76 df 7d fe f5 da 51 10 35 e3 6f 6f cb 6d 5c 1a 47 23 b1 fd a4 75 5d 3b dd 88 5f 44 b5 de 11 83 20 05 fb 14 5a cf 23 06 bf c2 0d c9 0e 74 f0 fc 7a 01 b8 ca 18 fd 2f 40 01 2a ed 8f 2a 10 4f 30 fe a7 af 40 67 62 a0 67 86 78 0b 7b 1e 50 bc 9a 23 38 6f cf 3d 6b 31 b1 da 9a db d6 09 b8 c7 a0 18 fb 41 ec d6 c4 65 2d 5a 3c 60 eb 8f 76 fd bb fd 42 d1 6e eb 64 74 f0 27 65 55 a5 f3 1e dc 63 cf 94 42 db a3 18 58 f5 0c 2d fa 20 77 42 d9 9e 44 68 ca b9 df c3 9d ce 8f ab 28 ab cd 9b bb de 6d b2 5d 5c 72 61 08 c9 3d 27 e5 66 2d ce 42 85 a1 a3 bf 44 c5 56 06 bb 33 3a bd 7f 1a 13 8c d8 07 eb 92 d4 73 73 76 6b 75 06 4f 42 6f 48 59 e1 28 be 9c 62 df 42 2f d3 37 c6 34 57 ff 52 c6 e5 23 4e 91 58 20 48 73 4c a8 2e e9 cb a2 aa cd 55 ed 24 ea 60 c2 f1 c5 7e 45 86 e4 81 b2 ef 29 53 f6 e5 21 ff 86 8e 69 a6 4e b2 1f 90 f4 f9 3d 23 8c f9 9c aa 6a f6 8c 5d 73 35 e2 32 c5 5a 3f fc 01 df 96 21 76 c7 02 00 00 Data Ascii: ?o0~]rewSKNE'6[h4wp5]@gv}Q5oom\G#u];_D Z#tz/@**O0@gbgx{P#8o=k1Ae-Z<`vBndt'eUcBX- wBDh(m]\ra='f-BDV3:ssvkuOBoHY(bB/74WR#NX HsL.U$`~E)S!iN=#j]s52Z?!v
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 13 Oct 2024 16:06:57 GMTServer: ApacheUpgrade: h2Connection: Upgrade, closeLast-Modified: Fri, 11 Oct 2024 08:41:34 GMTETag: "1110-6242f74542b80-gzip"Accept-Ranges: bytesVary: Accept-EncodingContent-Encoding: gzipContent-Length: 2424Content-Type: text/javascriptData Raw: 1f 8b 08 00 00 00 00 00 00 03 dd 58 59 8f a3 48 12 7e df 5f 61 59 da 9d 6e e1 6a c0 36 18 aa ba 66 05 d8 60 83 31 e6 30 60 f7 b4 4a dc 37 c9 7d b8 a7 ff fb da d5 33 a3 dd 99 9e d5 6a 55 2f bb 3c f0 05 99 91 5f 44 46 a2 c8 50 44 59 01 aa e6 cb 38 b1 ea 49 33 7b b9 43 3e 03 77 f0 66 ce 1d ea 99 7d 87 ea ab 5f 81 6c fa 01 8e 72 d7 1b 3e a0 36 39 f7 56 2b e7 43 5c 4f 9f 1c 90 d7 cd 84 7a 9e ba 56 63 3d 46 99 15 78 70 91 07 4f b6 55 7b f8 72 16 e9 b4 a4 f4 88 c0 05 80 ba 3d 07 f5 14 6e 4e c1 4d da ca f7 ef 8e a1 ce 77 1c 11 68 a9 dd 05 ca 3c a8 0a b2 a3 aa 7a e9 e0 af 2a 4a 2e 9f 50 9a a2 98 21 ee 3b e2 2c 9f ee 83 bc b3 09 2f 4e 4f 51 9b fc a6 44 f3 08 e5 62 d9 76 71 27 36 2f ea 49 a1 f5 6d e8 ad 2e ce 10 87 fa 76 b3 b3 17 34 df 2a 41 2c 8e e3 6e b3 9f d3 e7 6d c0 c7 54 44 f7 cc 96 a0 77 c7 80 39 a7 14 dd 63 c1 e8 48 57 ba a7 18 7a 5c f2 27 47 a2 b6 bc 5c 0e 0b cb bb 54 9d c1 57 30 ea 90 48 0f 7b d7 7d 7f b9 aa 90 ee e6 5e 56 e0 2d de 95 55 bb a8 e6 88 c5 5e ac 40 c4 44 86 64 2e 96 bc c1 c5 11 a5 2e f8 99 bd 09 08 c5 cf 2f 06 d8 78 5b 7a 4c 72 68 e5 69 17 af 33 37 69 7e c5 d0 bd b7 68 56 96 49 c2 47 98 24 21 02 77 e1 f5 4a 2d 51 af 23 16 6e a6 61 04 09 c1 57 22 c4 da 05 02 8c 3d 0b 8b 0e 2c ad 72 68 4b 2f 33 69 e5 c2 a3 4e 42 e4 62 e1 c9 3d 0c d9 cd de 4f 97 7e b1 58 c0 64 b3 b0 51 27 d6 96 71 67 9c 8c 36 f5 f4 c0 87 d3 4c 1b 9c 39 ae c2 29 3d 70 26 56 6b 3a 87 2f 60 02 3b f8 44 95 5e 58 b0 19 c4 73 53 8a c5 e6 24 91 7a cd 9c 49 4e 24 09 62 c8 0b f6 cc 26 07 86 5c 2f 38 87 c4 2b 6f 73 8e c0 1c 22 28 3f c7 a2 c1 ab 2a 04 db 88 e5 71 e0 5d 11 a3 c4 ab 05 2a f6 2c 68 10 85 56 6c e3 a0 f3 95 9f 2f d0 8b ed 32 60 7d ea 3b 79 bb 11 7a be cc 15 f1 d2 ef 4b 75 5c 34 fa 6d f8 0a 73 ed d6 97 17 72 13 f0 a7 13 1e 28 88 80 9d ad b8 41 d7 6a b4 47 93 65 c4 69 c1 46 df cb bb 4d db a2 d6 69 7b e2 d8 56 66 89 ec 30 84 54 3e b4 30 9e 57 11 a1 f2 82 24 28 09 46 c8 26 cd 96 43 8c 33 aa 57 ce 21 88 74 9b 8e 66 95 6b 95 5c 34 94 0b 0e 25 83 a9 01 be 19 0f 06 15 78 88 4e 09 72 95 5d da ba d1 ed 4b 73 b5 f4 92 74 85 db 7e 7c 3f 2d a5 c4 f2 38 9d e5 50 b2 0b a3 08 44 8e b7 81 48 54 81 05 08 90 41 cf 00 9e d9 7b 46 a7 64 0d b5 3a ef 69 50 5e 23 5d 0b 5b 67 38 b3 17 da 89 43 8a 24 e3 11 ea 04 21 f5 dc 90 1b a4 e3 82 e0 a3 39 91 55 22 10 a2 0b e1 6d cc 8a 40 8c 63 23 51 80 62 da 25 23 44 ad b9 38 8a e4 55 b7 28 14 c4 9b 36 73 51 79 ad 13 78 db f4 c5 16 ef d7 b6 5e 24 54 71 d8 cd f7 dd a0 1b 3a c2 c5 d6 ba 5d 88 d7 80 29 01 a2 61 36 cd 55 96 04 04 6a 17 cf dd 33 df 66 4c cd cc c3 93 69 5e e3 01 8a 98 43 c0 0a 41 b7 e6 0f f3 91 94 2a f7 c2 91 6b 20 88 ec b9 43 aa ad 65 3a a1 1b f4 30 1d 1d 38 96 62 f5 23 ca d2 a8 10 2c a3 40 d9 12 cc ce 66 c6 d0 dd 2e 91 ca 50 1a
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 13 Oct 2024 16:06:57 GMTServer: ApacheUpgrade: h2Connection: Upgrade, closeLast-Modified: Fri, 11 Oct 2024 08:41:34 GMTETag: "1a4a-6242f74542b80-gzip"Accept-Ranges: bytesVary: Accept-EncodingContent-Encoding: gzipContent-Length: 2536Content-Type: text/javascriptData Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 59 5b 77 d3 48 12 7e df 5f 21 7a 39 8c 74 b6 ad c4 81 5c 50 8e c6 4b 02 cc 04 98 c0 70 9d c1 e3 35 6d a9 6c 75 22 a9 85 d4 b2 63 8c ff fb 56 b7 5a 96 9c d8 81 b3 cb bc b8 a4 be d4 f5 ab ea 6a 99 27 99 c8 e5 22 b4 58 61 3d a7 17 8a 64 f4 52 91 8f 34 52 64 4a 85 22 09 0d 14 39 a3 4c 91 82 c6 74 aa 1e 52 5a 2a 22 a8 54 e4 0d 9d 28 c2 e9 4c 91 9c a6 8a bc a5 5c 91 80 26 8a bc a0 63 45 66 14 14 19 d2 4c 91 0f f4 b3 22 cf 68 a1 c8 2f f4 4a 91 5f e9 50 91 df 97 e3 5c 24 c4 dd e1 69 08 57 6e 77 f4 70 0f 0e 0f 03 f7 a2 20 c7 bc 52 5e af fb 83 9e 28 f2 67 c5 0a a0 de 76 22 a4 14 89 bb 7f 74 04 f7 1f 8c bb 37 f6 15 ab 95 33 96 a7 ee de e1 83 bd 2e ae d5 eb 02 91 16 d2 12 e0 2f 82 98 15 85 47 70 40 32 9e 42 4e 96 54 36 c3 52 64 9d f6 14 6b a6 ca 02 f2 4e 2c 26 3c c5 f1 b8 19 57 c2 3a 23 71 85 a3 29 8e 16 72 1e 83 b7 20 09 cb 71 69 27 86 b1 24 1e e9 ee 67 b8 60 49 f9 26 7e 66 77 8e 73 63 91 7b 84 65 43 48 18 8f 09 35 4b 59 07 c7 93 4e cc 46 10 e3 c2 b2 61 c2 82 40 94 a9 ec f0 74 2c 70 26 6b 14 08 79 91 c5 6c ee 91 71 0c 57 84 92 8b b2 90 7c 3c d7 d6 41 aa 74 2a 32 16 40 67 04 72 06 90 2a e5 c2 6b 46 49 b8 92 c8 34 69 86 73 48 20 19 69 cf 04 37 6d 45 e7 21 db bd dd ca d4 71 4b cb 4e 01 81 e4 22 25 f4 da 96 91 8e a9 da b5 87 bb 68 50 e6 85 f2 40 26 38 6a 99 2b 36 d3 36 9b 98 a7 97 28 7b 88 63 97 30 f7 f6 6a 07 a1 7b 26 20 3b 11 c4 19 4e 4f 70 9a b0 9c b3 4e c4 c3 10 6d c3 b8 e6 25 b4 dc 19 f2 29 0f d1 fd 29 ba 95 29 97 ce db 52 d6 9c 3d 33 b2 76 6f ec b6 1a 3e a3 1c d8 a5 95 c2 ac c3 12 86 9b 22 f0 9f db 8b e1 30 65 09 78 44 e3 1d 4d 07 59 66 f6 08 9c 45 85 c6 b1 9f d9 77 ba ce 71 0c d2 1a 55 cf f4 d2 d0 47 86 5e 99 35 d5 8e f7 f8 46 48 b5 83 99 15 a5 19 ab 56 84 fe 33 db a1 9f fd 0f f8 fb ce df f9 cf 5f e1 e2 88 2e ef ee d0 2f f8 d2 67 9d 2f 8f 3a 1f 77 3b 0f dd 61 67 f0 af 7f b7 de f1 f5 2f d7 bc 0f 16 7b f4 40 ed 91 c8 7a a1 91 e8 11 42 33 b4 7e 26 f2 50 3d c7 2c 9d 94 6c 02 5e ca a6 7c c2 a4 c8 dd 7a c8 2d 24 cb 65 f1 81 cb c8 26 17 8c 38 3d f5 eb 11 0c 03 2d 59 6b 83 c2 ff a3 09 42 91 f2 0c 79 2e 1d 7a e1 db 8e ff f3 62 ec 4e 59 8c 18 bf b3 bb a4 af ae 0d 75 97 f4 75 35 24 ab 21 57 eb e7 fb 3e 21 3d bb 34 cb c8 13 85 1e 6b 2e ca dc d2 f3 96 c8 ad 44 8c 78 0c 56 16 89 14 ac b4 d4 30 a6 a3 95 2c fa 68 f5 e8 78 f6 6a bc 4b 57 4c 09 fd e2 4a 28 a4 bd 26 da f9 fa f5 dd a6 e1 1e 5b f1 f3 ae 2b c6 2c 7c e5 a1 d1 8d 85 61 0e 45 a1 74 5c 57 ae d1 88 ae 98 75 1d 67 49 ef 6e 72 01 ea d7 52 95 b5 3c f6 d8 9f e0 ea 0a 20 73 ff d3 b1 75 77 11 8a a0 4c d0 f7 6e 20 c4 25 87 e5 27 17 ab 05 97 b6 9e 9c 2c fd 4f 68 56 9f 90 c1 71 8e a0 cd 53 6b 7e c7 f7 a7 02 55 de ed cd dd 4c 64 b6 63 36 90 63 82 8f 11 1f 4b db f1 fa 83 25 3d
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 13 Oct 2024 16:06:57 GMTServer: ApacheUpgrade: h2Connection: Upgrade, closeLast-Modified: Fri, 11 Oct 2024 08:41:34 GMTETag: "1505-6242f74542b80-gzip"Accept-Ranges: bytesVary: Accept-EncodingContent-Encoding: gzipContent-Length: 3883Content-Type: text/javascriptData Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 57 c7 ce c4 46 72 be fb 29 16 7b a5 01 e6 64 61 0f 4c c3 38 cc 69 78 31 98 87 39 47 c3 ef 6e fe 92 b0 92 d6 be 9a 40 63 9a c5 9a ca 5d f5 75 3a f4 cb fa 37 e6 1f 7f cf e2 35 fe 8f aa 8b cb 1c 1c fb f2 97 24 5e 72 02 fb 77 90 ae 41 8c 61 2c a7 89 14 bb 64 58 c6 62 9e b7 e7 97 e1 41 e4 e0 04 86 69 44 f6 94 1d e1 f9 22 d8 72 f0 b2 3d ff 65 97 be c8 7a cf 62 9e bd 17 be 4e 2f 78 7d cb e7 db e7 23 39 65 29 b2 43 2b 9d 9e 2f bb c2 57 71 9a 59 ab 30 58 64 a9 db e0 df 8b 7e 95 ab 56 2d 2c 57 0e 2a 5f 42 86 78 32 96 78 41 ad cc c9 ab e6 40 fb b3 56 fd 82 7e f6 bf 2d f7 57 3a fc cf f7 7f 59 fa 9f df 0b 90 61 58 41 66 64 86 29 99 37 2b 58 0c 27 58 02 2f 58 12 78 32 4c fa 78 c6 31 e5 fb 37 1f ff f4 b0 87 20 3e f4 17 c7 b8 3f 7c f8 e3 34 cb 1c 32 cb 31 a9 fc d0 19 e6 f8 8d 8d 61 64 9e 65 85 93 b5 3e 92 50 fd 78 2b 54 96 a7 78 69 64 da c2 69 f9 f2 fd 78 1b 0b c1 f1 51 1d 8a d7 ab 63 07 05 86 5d 7e f4 71 cc f1 44 f0 5f d4 b2 96 25 b2 c7 9b 03 29 eb c7 da c7 68 81 67 ac 94 67 0e 8b fb 5d e7 f3 08 cf de b2 df 96 e7 08 d7 eb 89 ba 2c be 14 c1 7f b7 ef ea 13 8a a7 8c bd b8 cf 2e 81 c8 e3 f0 a3 83 61 be 3f fe 32 20 23 55 25 fb a8 15 9e 60 58 a2 2a d7 d3 c7 75 d6 18 da 52 8b 31 16 92 05 7c be 2d 81 e1 68 d5 40 9e 3b 9b 55 61 d2 c2 47 be b4 17 19 a9 1b 5f 6d 9b ce 53 8e b6 72 f0 ee 14 0b c9 bb ac e6 57 51 cc 1f 52 7f b6 1f d4 ca 58 9d f0 52 cc 4c 60 69 83 22 20 e4 dc 1c e1 47 63 a7 18 51 aa 33 bf 85 83 38 17 92 9b c8 91 74 f0 00 5d 4f d1 21 8a df 6f 9c e7 0d 35 b0 d1 0b 77 a3 f5 5e 22 05 0e 30 e3 a0 12 25 86 3b f4 db e4 43 d6 ab a9 61 b2 29 3c 19 2a b1 dc 36 f0 6d fe aa fb f7 ed 2b be f1 0b 50 8d 36 a7 24 bc 06 be a2 a1 90 a1 9c 14 e7 1e d6 a9 6f 48 92 12 91 f2 d2 e7 21 57 d1 af 49 49 e4 ce 95 e0 cc 96 38 f4 45 ce 2d a2 7f 2b fc c4 d5 e1 cb c2 0a 66 43 1c b9 7d 82 8c bd 49 51 f4 97 fe f2 56 0b 78 21 27 95 ac 5f f1 8e 2a f8 a0 ec cf 14 1d 99 6a d3 08 9c bf f0 84 44 ed 7a bf 95 8b 52 af 36 92 9f 02 e4 74 42 28 25 94 9f 29 be be fd d5 9a 52 47 b9 e7 18 6e 48 03 8b 09 d3 5a 1c ba da fe b7 1f 9c 24 1e db f7 09 08 87 03 78 a1 47 be a1 b9 d4 64 90 32 7d 4a 01 d9 15 10 33 e5 f8 44 52 3b 62 54 a4 b8 f8 31 02 82 8c 98 8f 45 f6 ca 13 70 f9 f0 be c3 8f 37 13 6f f4 52 f8 40 5a 70 d7 9d 04 f5 66 e3 c4 02 ef 30 5f 50 f1 7a 0c 84 0d 2e 30 e1 2f 28 18 1f d5 52 4b 6e 85 98 6b f5 a1 41 8a a9 b2 bd 74 5a d8 41 07 dc 9c 21 ba a0 d4 f9 88 cc 56 73 81 a7 33 94 f8 21 d6 53 47 9c 80 af 44 35 7d a0 06 2e d1 c2 cc ae d3 fe 54 11 22 25 fe 97 dc be 6d 91 49 56 c1 87 e1 0b 4e 7b a3 5b 84 e1 5f ca e5 6d 0d ac 93 29 48 08 66 44 82 f0 3c 75 c5 18 f2 59 23 a4 be 0f bc 4f 97 80 98 c8 e9 08 81 43 ef a9 7c df 77 f2 53 61 b7 7a 71 f1 35 45 a2 4d ad bb db 98
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 13 Oct 2024 16:06:58 GMTServer: ApacheUpgrade: h2Connection: Upgrade, closeLast-Modified: Sun, 13 Oct 2024 08:38:13 GMTETag: "4486-62457a41297c1-gzip"Accept-Ranges: bytesVary: Accept-EncodingContent-Encoding: gzipContent-Length: 2480Content-Type: image/x-iconData Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 9b 4f 68 1f 45 14 c7 a7 fc d2 96 82 87 60 2f 01 6d cc a1 a5 56 10 da 1e 04 0f d6 62 1b 11 bc b4 d2 f4 5c 0b b6 de 84 8a 45 10 a4 88 46 11 84 84 fe 01 41 88 2d 48 72 b0 9a da 83 15 db 34 10 11 9a b6 44 a4 c5 a4 01 ed a1 49 b1 d0 3f 34 5a b4 4a c6 fd fc 66 e7 b7 b3 b3 33 bb fb fb ed 6e 7e 17 bf f0 b2 bf dd ec cc bc 79 f3 66 e6 bd 79 6f 85 58 26 3a c4 c6 8d 22 b8 f6 88 91 75 42 bc 28 84 e8 e9 09 ef 3b 85 b8 13 3c eb ea 52 f7 1f ad 12 e2 d8 33 42 74 76 aa fb d7 3b 84 e8 de 2a c4 93 41 99 a0 0a b1 47 a8 e7 e0 d0 3a 91 0b 52 ca de 80 3e 0d e8 52 40 0b b2 7d b8 17 f2 70 38 a0 e7 73 f0 bd 36 a0 f1 36 f2 9b 85 6f 03 ea f6 f0 fe 82 2c 20 eb 5f ee 4a f9 fd 0d 29 07 ae 4a 39 18 d0 81 49 29 77 8c 49 f9 de 94 ba 1f 9a 91 f2 e2 2d 29 ef 3f 2c dc 87 db 01 3d 6b f1 fe b4 54 63 d5 14 ce ce 29 3e 57 9f 94 52 8c 84 34 ac 69 51 5d 63 cf d4 fd 96 33 aa 9f d3 4d b7 d8 40 20 09 b9 d6 e0 ff 52 de 82 c8 8f b6 57 7f 19 e7 29 f6 7b c4 d3 07 bb 2f c3 aa 2f 5f 5d 6f a9 0f e7 42 de 77 e6 e5 7b 50 f3 3d e2 a0 61 47 7f 12 ff 5f 4c f6 31 bc 6e f8 c6 dd 8f b9 3f 52 d9 42 e7 bf c8 e2 1d bd ae eb 48 4c 76 8b 31 1e 68 7f c7 f9 40 df 7f 52 fd 1c b0 88 67 af 4e a8 39 a1 ca 2d 26 c7 6d 58 fd 7f fe cf a8 ed 9d e7 55 79 0f 8e 49 a5 4b 4e 20 73 f4 db a5 1f f0 0a 4f 17 bd a5 d3 31 7d 57 ca 93 bf 05 f5 5f d0 b2 89 c6 86 7b e6 16 18 ba a6 9e 79 c6 61 36 ad 7e 74 d3 94 37 b2 a1 cd 12 d6 90 04 f4 5a 60 ca 89 b6 e0 83 fb 37 27 9d c5 fe 76 f2 7e 2f ae 2f c8 28 43 0f 4b 43 63 7d 38 a9 f4 0d f0 1b ca 83 86 ae 8f 2c 2d df 69 60 0e 20 47 73 5e b8 50 1f ab 11 35 87 e6 32 de ad 02 5a 57 e0 17 d9 0f 5c 8d eb 54 d6 5c 43 6f 5a 5c 8b 4b 03 3c ee 9d 70 ef 27 05 f6 bb 04 16 16 16 e4 89 13 27 e4 ee dd bb e4 9a 35 8f c9 e5 cb 3b 02 aa 05 bf 1f 0f 9e f5 c9 fe fe f7 e5 f4 f4 b4 b7 fc d8 d8 58 fd 3d ea f0 61 f2 f7 90 6e 95 ab c7 b4 09 9f 8a 67 17 d5 1a bf e9 df fc fc 7c ac fc e8 e8 d7 b1 f7 0f 1e 3c 58 1e 73 19 e8 ef ff c0 cb 2b d4 d1 51 33 9e ab df f4 15 9e c1 cc cc 8c b3 cf fb f7 ef 93 f7 ef df af 94 f7 73 e7 ce 25 f8 75 f5 c1 e4 dd 24 c6 6d f3 e6 8d de f7 b6 6f df 56 69 1f 36 6d da e8 e1 d7 f7 2c 8b 92 65 98 4b 55 c0 37 ee 2e 4a ce 8d 9a 87 df 24 ff 8c 4f 15 38 72 e4 70 2e be 2f 5d 8a 4c 71 7e 47 63 96 ae 5b 9a cc f2 65 22 39 6f 93 ba e0 6a 1b 7d 4e 5f ab a2 71 60 cd ad 0a ac d5 d1 fa 92 94 61 6f ef 76 6f 59 7b bd f4 d1 dc dc 5c 65 fc ef db f7 5a 8a 1e 77 c8 be be 5d a9 e5 93 7a 14 27 e4 53 25 b2 f4 3f ab 7d f6 a8 76 f2 7f ea d4 68 aa fe a2 e3 69 50 fd f7 8f 1f fb 74 95 60 1e 46 7a ef 5e 3f d2 6c 99 38 ff c9 75 b5 6a f9 03 bf 0e 44 76 02 7b b4 0b 97 2f 5f 6e ab fe 00 ec 30 b5 16 26 c7 20 b2 7b 14 2f f4 03 1b 35 ce bf 7f df 5e 0a fe 01 76 6f da 18 b8 65 bb ab 6e db
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 13 Oct 2024 16:06:58 GMTServer: ApacheUpgrade: h2Connection: Upgrade, closeLast-Modified: Fri, 11 Oct 2024 08:41:34 GMTETag: "1110-6242f74542b80-gzip"Accept-Ranges: bytesVary: Accept-EncodingContent-Encoding: gzipContent-Length: 2424Content-Type: text/javascriptData Raw: 1f 8b 08 00 00 00 00 00 00 03 dd 58 59 8f a3 48 12 7e df 5f 61 59 da 9d 6e e1 6a c0 36 18 aa ba 66 05 d8 60 83 31 e6 30 60 f7 b4 4a dc 37 c9 7d b8 a7 ff fb da d5 33 a3 dd 99 9e d5 6a 55 2f bb 3c f0 05 99 91 5f 44 46 a2 c8 50 44 59 01 aa e6 cb 38 b1 ea 49 33 7b b9 43 3e 03 77 f0 66 ce 1d ea 99 7d 87 ea ab 5f 81 6c fa 01 8e 72 d7 1b 3e a0 36 39 f7 56 2b e7 43 5c 4f 9f 1c 90 d7 cd 84 7a 9e ba 56 63 3d 46 99 15 78 70 91 07 4f b6 55 7b f8 72 16 e9 b4 a4 f4 88 c0 05 80 ba 3d 07 f5 14 6e 4e c1 4d da ca f7 ef 8e a1 ce 77 1c 11 68 a9 dd 05 ca 3c a8 0a b2 a3 aa 7a e9 e0 af 2a 4a 2e 9f 50 9a a2 98 21 ee 3b e2 2c 9f ee 83 bc b3 09 2f 4e 4f 51 9b fc a6 44 f3 08 e5 62 d9 76 71 27 36 2f ea 49 a1 f5 6d e8 ad 2e ce 10 87 fa 76 b3 b3 17 34 df 2a 41 2c 8e e3 6e b3 9f d3 e7 6d c0 c7 54 44 f7 cc 96 a0 77 c7 80 39 a7 14 dd 63 c1 e8 48 57 ba a7 18 7a 5c f2 27 47 a2 b6 bc 5c 0e 0b cb bb 54 9d c1 57 30 ea 90 48 0f 7b d7 7d 7f b9 aa 90 ee e6 5e 56 e0 2d de 95 55 bb a8 e6 88 c5 5e ac 40 c4 44 86 64 2e 96 bc c1 c5 11 a5 2e f8 99 bd 09 08 c5 cf 2f 06 d8 78 5b 7a 4c 72 68 e5 69 17 af 33 37 69 7e c5 d0 bd b7 68 56 96 49 c2 47 98 24 21 02 77 e1 f5 4a 2d 51 af 23 16 6e a6 61 04 09 c1 57 22 c4 da 05 02 8c 3d 0b 8b 0e 2c ad 72 68 4b 2f 33 69 e5 c2 a3 4e 42 e4 62 e1 c9 3d 0c d9 cd de 4f 97 7e b1 58 c0 64 b3 b0 51 27 d6 96 71 67 9c 8c 36 f5 f4 c0 87 d3 4c 1b 9c 39 ae c2 29 3d 70 26 56 6b 3a 87 2f 60 02 3b f8 44 95 5e 58 b0 19 c4 73 53 8a c5 e6 24 91 7a cd 9c 49 4e 24 09 62 c8 0b f6 cc 26 07 86 5c 2f 38 87 c4 2b 6f 73 8e c0 1c 22 28 3f c7 a2 c1 ab 2a 04 db 88 e5 71 e0 5d 11 a3 c4 ab 05 2a f6 2c 68 10 85 56 6c e3 a0 f3 95 9f 2f d0 8b ed 32 60 7d ea 3b 79 bb 11 7a be cc 15 f1 d2 ef 4b 75 5c 34 fa 6d f8 0a 73 ed d6 97 17 72 13 f0 a7 13 1e 28 88 80 9d ad b8 41 d7 6a b4 47 93 65 c4 69 c1 46 df cb bb 4d db a2 d6 69 7b e2 d8 56 66 89 ec 30 84 54 3e b4 30 9e 57 11 a1 f2 82 24 28 09 46 c8 26 cd 96 43 8c 33 aa 57 ce 21 88 74 9b 8e 66 95 6b 95 5c 34 94 0b 0e 25 83 a9 01 be 19 0f 06 15 78 88 4e 09 72 95 5d da ba d1 ed 4b 73 b5 f4 92 74 85 db 7e 7c 3f 2d a5 c4 f2 38 9d e5 50 b2 0b a3 08 44 8e b7 81 48 54 81 05 08 90 41 cf 00 9e d9 7b 46 a7 64 0d b5 3a ef 69 50 5e 23 5d 0b 5b 67 38 b3 17 da 89 43 8a 24 e3 11 ea 04 21 f5 dc 90 1b a4 e3 82 e0 a3 39 91 55 22 10 a2 0b e1 6d cc 8a 40 8c 63 23 51 80 62 da 25 23 44 ad b9 38 8a e4 55 b7 28 14 c4 9b 36 73 51 79 ad 13 78 db f4 c5 16 ef d7 b6 5e 24 54 71 d8 cd f7 dd a0 1b 3a c2 c5 d6 ba 5d 88 d7 80 29 01 a2 61 36 cd 55 96 04 04 6a 17 cf dd 33 df 66 4c cd cc c3 93 69 5e e3 01 8a 98 43 c0 0a 41 b7 e6 0f f3 91 94 2a f7 c2 91 6b 20 88 ec b9 43 aa ad 65 3a a1 1b f4 30 1d 1d 38 96 62 f5 23 ca d2 a8 10 2c a3 40 d9 12 cc ce 66 c6 d0 dd 2e 91 ca 50 1a
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 13 Oct 2024 16:06:58 GMTServer: ApacheUpgrade: h2Connection: Upgrade, closeLast-Modified: Fri, 11 Oct 2024 08:41:34 GMTETag: "1505-6242f74542b80-gzip"Accept-Ranges: bytesVary: Accept-EncodingContent-Encoding: gzipContent-Length: 3883Content-Type: text/javascriptData Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 57 c7 ce c4 46 72 be fb 29 16 7b a5 01 e6 64 61 0f 4c c3 38 cc 69 78 31 98 87 39 47 c3 ef 6e fe 92 b0 92 d6 be 9a 40 63 9a c5 9a ca 5d f5 75 3a f4 cb fa 37 e6 1f 7f cf e2 35 fe 8f aa 8b cb 1c 1c fb f2 97 24 5e 72 02 fb 77 90 ae 41 8c 61 2c a7 89 14 bb 64 58 c6 62 9e b7 e7 97 e1 41 e4 e0 04 86 69 44 f6 94 1d e1 f9 22 d8 72 f0 b2 3d ff 65 97 be c8 7a cf 62 9e bd 17 be 4e 2f 78 7d cb e7 db e7 23 39 65 29 b2 43 2b 9d 9e 2f bb c2 57 71 9a 59 ab 30 58 64 a9 db e0 df 8b 7e 95 ab 56 2d 2c 57 0e 2a 5f 42 86 78 32 96 78 41 ad cc c9 ab e6 40 fb b3 56 fd 82 7e f6 bf 2d f7 57 3a fc cf f7 7f 59 fa 9f df 0b 90 61 58 41 66 64 86 29 99 37 2b 58 0c 27 58 02 2f 58 12 78 32 4c fa 78 c6 31 e5 fb 37 1f ff f4 b0 87 20 3e f4 17 c7 b8 3f 7c f8 e3 34 cb 1c 32 cb 31 a9 fc d0 19 e6 f8 8d 8d 61 64 9e 65 85 93 b5 3e 92 50 fd 78 2b 54 96 a7 78 69 64 da c2 69 f9 f2 fd 78 1b 0b c1 f1 51 1d 8a d7 ab 63 07 05 86 5d 7e f4 71 cc f1 44 f0 5f d4 b2 96 25 b2 c7 9b 03 29 eb c7 da c7 68 81 67 ac 94 67 0e 8b fb 5d e7 f3 08 cf de b2 df 96 e7 08 d7 eb 89 ba 2c be 14 c1 7f b7 ef ea 13 8a a7 8c bd b8 cf 2e 81 c8 e3 f0 a3 83 61 be 3f fe 32 20 23 55 25 fb a8 15 9e 60 58 a2 2a d7 d3 c7 75 d6 18 da 52 8b 31 16 92 05 7c be 2d 81 e1 68 d5 40 9e 3b 9b 55 61 d2 c2 47 be b4 17 19 a9 1b 5f 6d 9b ce 53 8e b6 72 f0 ee 14 0b c9 bb ac e6 57 51 cc 1f 52 7f b6 1f d4 ca 58 9d f0 52 cc 4c 60 69 83 22 20 e4 dc 1c e1 47 63 a7 18 51 aa 33 bf 85 83 38 17 92 9b c8 91 74 f0 00 5d 4f d1 21 8a df 6f 9c e7 0d 35 b0 d1 0b 77 a3 f5 5e 22 05 0e 30 e3 a0 12 25 86 3b f4 db e4 43 d6 ab a9 61 b2 29 3c 19 2a b1 dc 36 f0 6d fe aa fb f7 ed 2b be f1 0b 50 8d 36 a7 24 bc 06 be a2 a1 90 a1 9c 14 e7 1e d6 a9 6f 48 92 12 91 f2 d2 e7 21 57 d1 af 49 49 e4 ce 95 e0 cc 96 38 f4 45 ce 2d a2 7f 2b fc c4 d5 e1 cb c2 0a 66 43 1c b9 7d 82 8c bd 49 51 f4 97 fe f2 56 0b 78 21 27 95 ac 5f f1 8e 2a f8 a0 ec cf 14 1d 99 6a d3 08 9c bf f0 84 44 ed 7a bf 95 8b 52 af 36 92 9f 02 e4 74 42 28 25 94 9f 29 be be fd d5 9a 52 47 b9 e7 18 6e 48 03 8b 09 d3 5a 1c ba da fe b7 1f 9c 24 1e db f7 09 08 87 03 78 a1 47 be a1 b9 d4 64 90 32 7d 4a 01 d9 15 10 33 e5 f8 44 52 3b 62 54 a4 b8 f8 31 02 82 8c 98 8f 45 f6 ca 13 70 f9 f0 be c3 8f 37 13 6f f4 52 f8 40 5a 70 d7 9d 04 f5 66 e3 c4 02 ef 30 5f 50 f1 7a 0c 84 0d 2e 30 e1 2f 28 18 1f d5 52 4b 6e 85 98 6b f5 a1 41 8a a9 b2 bd 74 5a d8 41 07 dc 9c 21 ba a0 d4 f9 88 cc 56 73 81 a7 33 94 f8 21 d6 53 47 9c 80 af 44 35 7d a0 06 2e d1 c2 cc ae d3 fe 54 11 22 25 fe 97 dc be 6d 91 49 56 c1 87 e1 0b 4e 7b a3 5b 84 e1 5f ca e5 6d 0d ac 93 29 48 08 66 44 82 f0 3c 75 c5 18 f2 59 23 a4 be 0f bc 4f 97 80 98 c8 e9 08 81 43 ef a9 7c df 77 f2 53 61 b7 7a 71 f1 35 45 a2 4d ad bb db 98
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 13 Oct 2024 16:06:58 GMTServer: ApacheUpgrade: h2Connection: Upgrade, closeLast-Modified: Fri, 11 Oct 2024 08:41:34 GMTETag: "1a4a-6242f74542b80-gzip"Accept-Ranges: bytesVary: Accept-EncodingContent-Encoding: gzipContent-Length: 2536Content-Type: text/javascriptData Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 59 5b 77 d3 48 12 7e df 5f 21 7a 39 8c 74 b6 ad c4 81 5c 50 8e c6 4b 02 cc 04 98 c0 70 9d c1 e3 35 6d a9 6c 75 22 a9 85 d4 b2 63 8c ff fb 56 b7 5a 96 9c d8 81 b3 cb bc b8 a4 be d4 f5 ab ea 6a 99 27 99 c8 e5 22 b4 58 61 3d a7 17 8a 64 f4 52 91 8f 34 52 64 4a 85 22 09 0d 14 39 a3 4c 91 82 c6 74 aa 1e 52 5a 2a 22 a8 54 e4 0d 9d 28 c2 e9 4c 91 9c a6 8a bc a5 5c 91 80 26 8a bc a0 63 45 66 14 14 19 d2 4c 91 0f f4 b3 22 cf 68 a1 c8 2f f4 4a 91 5f e9 50 91 df 97 e3 5c 24 c4 dd e1 69 08 57 6e 77 f4 70 0f 0e 0f 03 f7 a2 20 c7 bc 52 5e af fb 83 9e 28 f2 67 c5 0a a0 de 76 22 a4 14 89 bb 7f 74 04 f7 1f 8c bb 37 f6 15 ab 95 33 96 a7 ee de e1 83 bd 2e ae d5 eb 02 91 16 d2 12 e0 2f 82 98 15 85 47 70 40 32 9e 42 4e 96 54 36 c3 52 64 9d f6 14 6b a6 ca 02 f2 4e 2c 26 3c c5 f1 b8 19 57 c2 3a 23 71 85 a3 29 8e 16 72 1e 83 b7 20 09 cb 71 69 27 86 b1 24 1e e9 ee 67 b8 60 49 f9 26 7e 66 77 8e 73 63 91 7b 84 65 43 48 18 8f 09 35 4b 59 07 c7 93 4e cc 46 10 e3 c2 b2 61 c2 82 40 94 a9 ec f0 74 2c 70 26 6b 14 08 79 91 c5 6c ee 91 71 0c 57 84 92 8b b2 90 7c 3c d7 d6 41 aa 74 2a 32 16 40 67 04 72 06 90 2a e5 c2 6b 46 49 b8 92 c8 34 69 86 73 48 20 19 69 cf 04 37 6d 45 e7 21 db bd dd ca d4 71 4b cb 4e 01 81 e4 22 25 f4 da 96 91 8e a9 da b5 87 bb 68 50 e6 85 f2 40 26 38 6a 99 2b 36 d3 36 9b 98 a7 97 28 7b 88 63 97 30 f7 f6 6a 07 a1 7b 26 20 3b 11 c4 19 4e 4f 70 9a b0 9c b3 4e c4 c3 10 6d c3 b8 e6 25 b4 dc 19 f2 29 0f d1 fd 29 ba 95 29 97 ce db 52 d6 9c 3d 33 b2 76 6f ec b6 1a 3e a3 1c d8 a5 95 c2 ac c3 12 86 9b 22 f0 9f db 8b e1 30 65 09 78 44 e3 1d 4d 07 59 66 f6 08 9c 45 85 c6 b1 9f d9 77 ba ce 71 0c d2 1a 55 cf f4 d2 d0 47 86 5e 99 35 d5 8e f7 f8 46 48 b5 83 99 15 a5 19 ab 56 84 fe 33 db a1 9f fd 0f f8 fb ce df f9 cf 5f e1 e2 88 2e ef ee d0 2f f8 d2 67 9d 2f 8f 3a 1f 77 3b 0f dd 61 67 f0 af 7f b7 de f1 f5 2f d7 bc 0f 16 7b f4 40 ed 91 c8 7a a1 91 e8 11 42 33 b4 7e 26 f2 50 3d c7 2c 9d 94 6c 02 5e ca a6 7c c2 a4 c8 dd 7a c8 2d 24 cb 65 f1 81 cb c8 26 17 8c 38 3d f5 eb 11 0c 03 2d 59 6b 83 c2 ff a3 09 42 91 f2 0c 79 2e 1d 7a e1 db 8e ff f3 62 ec 4e 59 8c 18 bf b3 bb a4 af ae 0d 75 97 f4 75 35 24 ab 21 57 eb e7 fb 3e 21 3d bb 34 cb c8 13 85 1e 6b 2e ca dc d2 f3 96 c8 ad 44 8c 78 0c 56 16 89 14 ac b4 d4 30 a6 a3 95 2c fa 68 f5 e8 78 f6 6a bc 4b 57 4c 09 fd e2 4a 28 a4 bd 26 da f9 fa f5 dd a6 e1 1e 5b f1 f3 ae 2b c6 2c 7c e5 a1 d1 8d 85 61 0e 45 a1 74 5c 57 ae d1 88 ae 98 75 1d 67 49 ef 6e 72 01 ea d7 52 95 b5 3c f6 d8 9f e0 ea 0a 20 73 ff d3 b1 75 77 11 8a a0 4c d0 f7 6e 20 c4 25 87 e5 27 17 ab 05 97 b6 9e 9c 2c fd 4f 68 56 9f 90 c1 71 8e a0 cd 53 6b 7e c7 f7 a7 02 55 de ed cd dd 4c 64 b6 63 36 90 63 82 8f 11 1f 4b db f1 fa 83 25 3d
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 13 Oct 2024 16:06:59 GMTServer: ApacheUpgrade: h2Connection: Upgrade, closeLast-Modified: Sun, 13 Oct 2024 08:38:13 GMTETag: "4486-62457a41297c1-gzip"Accept-Ranges: bytesVary: Accept-EncodingContent-Encoding: gzipContent-Length: 2480Content-Type: image/x-iconData Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 9b 4f 68 1f 45 14 c7 a7 fc d2 96 82 87 60 2f 01 6d cc a1 a5 56 10 da 1e 04 0f d6 62 1b 11 bc b4 d2 f4 5c 0b b6 de 84 8a 45 10 a4 88 46 11 84 84 fe 01 41 88 2d 48 72 b0 9a da 83 15 db 34 10 11 9a b6 44 a4 c5 a4 01 ed a1 49 b1 d0 3f 34 5a b4 4a c6 fd fc 66 e7 b7 b3 b3 33 bb fb fb ed 6e 7e 17 bf f0 b2 bf dd ec cc bc 79 f3 66 e6 bd 79 6f 85 58 26 3a c4 c6 8d 22 b8 f6 88 91 75 42 bc 28 84 e8 e9 09 ef 3b 85 b8 13 3c eb ea 52 f7 1f ad 12 e2 d8 33 42 74 76 aa fb d7 3b 84 e8 de 2a c4 93 41 99 a0 0a b1 47 a8 e7 e0 d0 3a 91 0b 52 ca de 80 3e 0d e8 52 40 0b b2 7d b8 17 f2 70 38 a0 e7 73 f0 bd 36 a0 f1 36 f2 9b 85 6f 03 ea f6 f0 fe 82 2c 20 eb 5f ee 4a f9 fd 0d 29 07 ae 4a 39 18 d0 81 49 29 77 8c 49 f9 de 94 ba 1f 9a 91 f2 e2 2d 29 ef 3f 2c dc 87 db 01 3d 6b f1 fe b4 54 63 d5 14 ce ce 29 3e 57 9f 94 52 8c 84 34 ac 69 51 5d 63 cf d4 fd 96 33 aa 9f d3 4d b7 d8 40 20 09 b9 d6 e0 ff 52 de 82 c8 8f b6 57 7f 19 e7 29 f6 7b c4 d3 07 bb 2f c3 aa 2f 5f 5d 6f a9 0f e7 42 de 77 e6 e5 7b 50 f3 3d e2 a0 61 47 7f 12 ff 5f 4c f6 31 bc 6e f8 c6 dd 8f b9 3f 52 d9 42 e7 bf c8 e2 1d bd ae eb 48 4c 76 8b 31 1e 68 7f c7 f9 40 df 7f 52 fd 1c b0 88 67 af 4e a8 39 a1 ca 2d 26 c7 6d 58 fd 7f fe cf a8 ed 9d e7 55 79 0f 8e 49 a5 4b 4e 20 73 f4 db a5 1f f0 0a 4f 17 bd a5 d3 31 7d 57 ca 93 bf 05 f5 5f d0 b2 89 c6 86 7b e6 16 18 ba a6 9e 79 c6 61 36 ad 7e 74 d3 94 37 b2 a1 cd 12 d6 90 04 f4 5a 60 ca 89 b6 e0 83 fb 37 27 9d c5 fe 76 f2 7e 2f ae 2f c8 28 43 0f 4b 43 63 7d 38 a9 f4 0d f0 1b ca 83 86 ae 8f 2c 2d df 69 60 0e 20 47 73 5e b8 50 1f ab 11 35 87 e6 32 de ad 02 5a 57 e0 17 d9 0f 5c 8d eb 54 d6 5c 43 6f 5a 5c 8b 4b 03 3c ee 9d 70 ef 27 05 f6 bb 04 16 16 16 e4 89 13 27 e4 ee dd bb e4 9a 35 8f c9 e5 cb 3b 02 aa 05 bf 1f 0f 9e f5 c9 fe fe f7 e5 f4 f4 b4 b7 fc d8 d8 58 fd 3d ea f0 61 f2 f7 90 6e 95 ab c7 b4 09 9f 8a 67 17 d5 1a bf e9 df fc fc 7c ac fc e8 e8 d7 b1 f7 0f 1e 3c 58 1e 73 19 e8 ef ff c0 cb 2b d4 d1 51 33 9e ab df f4 15 9e c1 cc cc 8c b3 cf fb f7 ef 93 f7 ef df af 94 f7 73 e7 ce 25 f8 75 f5 c1 e4 dd 24 c6 6d f3 e6 8d de f7 b6 6f df 56 69 1f 36 6d da e8 e1 d7 f7 2c 8b 92 65 98 4b 55 c0 37 ee 2e 4a ce 8d 9a 87 df 24 ff 8c 4f 15 38 72 e4 70 2e be 2f 5d 8a 4c 71 7e 47 63 96 ae 5b 9a cc f2 65 22 39 6f 93 ba e0 6a 1b 7d 4e 5f ab a2 71 60 cd ad 0a ac d5 d1 fa 92 94 61 6f ef 76 6f 59 7b bd f4 d1 dc dc 5c 65 fc ef db f7 5a 8a 1e 77 c8 be be 5d a9 e5 93 7a 14 27 e4 53 25 b2 f4 3f ab 7d f6 a8 76 f2 7f ea d4 68 aa fe a2 e3 69 50 fd f7 8f 1f fb 74 95 60 1e 46 7a ef 5e 3f d2 6c 99 38 ff c9 75 b5 6a f9 03 bf 0e 44 76 02 7b b4 0b 97 2f 5f 6e ab fe 00 ec 30 b5 16 26 c7 20 b2 7b 14 2f f4 03 1b 35 ce bf 7f df 5e 0a fe 01 76 6f da 18 b8 65 bb ab 6e db

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: account-update-amazon-gift-card-collection.9d6ihdz43.topConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/index.1b92e77c.js HTTP/1.1Host: account-update-amazon-gift-card-collection.9d6ihdz43.topConnection: keep-aliveOrigin: http://account-update-amazon-gift-card-collection.9d6ihdz43.topUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://account-update-amazon-gift-card-collection.9d6ihdz43.top/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/index.e114e1a4.css HTTP/1.1Host: account-update-amazon-gift-card-collection.9d6ihdz43.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://account-update-amazon-gift-card-collection.9d6ihdz43.top/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/Bottom.0424dd3e.css HTTP/1.1Host: account-update-amazon-gift-card-collection.9d6ihdz43.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://account-update-amazon-gift-card-collection.9d6ihdz43.top/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/index.6c0ee150.css HTTP/1.1Host: account-update-amazon-gift-card-collection.9d6ihdz43.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://account-update-amazon-gift-card-collection.9d6ihdz43.top/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/index.4d461f36.js HTTP/1.1Host: account-update-amazon-gift-card-collection.9d6ihdz43.topConnection: keep-aliveOrigin: http://account-update-amazon-gift-card-collection.9d6ihdz43.topUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/Bottom.588e34f1.js HTTP/1.1Host: account-update-amazon-gift-card-collection.9d6ihdz43.topConnection: keep-aliveOrigin: http://account-update-amazon-gift-card-collection.9d6ihdz43.topUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/warn.2742188e.js HTTP/1.1Host: account-update-amazon-gift-card-collection.9d6ihdz43.topConnection: keep-aliveOrigin: http://account-update-amazon-gift-card-collection.9d6ihdz43.topUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/index.1b92e77c.js HTTP/1.1Host: account-update-amazon-gift-card-collection.9d6ihdz43.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: account-update-amazon-gift-card-collection.9d6ihdz43.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://account-update-amazon-gift-card-collection.9d6ihdz43.top/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/Bottom.588e34f1.js HTTP/1.1Host: account-update-amazon-gift-card-collection.9d6ihdz43.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/index.4d461f36.js HTTP/1.1Host: account-update-amazon-gift-card-collection.9d6ihdz43.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/warn.2742188e.js HTTP/1.1Host: account-update-amazon-gift-card-collection.9d6ihdz43.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: account-update-amazon-gift-card-collection.9d6ihdz43.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: account-update-amazon-gift-card-collection.9d6ihdz43.top
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.amazon.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49858 version: TLS 1.2

Source: classification engine

Classification label: mal88.phis.win@16/25@10/5

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2292 --field-trial-handle=2204,i,11017439816736766845,16285686206145544316,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://account-update-amazon-gift-card-collection.9d6ihdz43.top/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2292 --field-trial-handle=2204,i,11017439816736766845,16285686206145544316,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	2 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://account-update-amazon-gift-card-collection.9d6ihdz43.top/	12%	Virustotal		Browse
http://account-update-amazon-gift-card-collection.9d6ihdz43.top/	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Link
bg.microsoft.map.fastly.net	0%	Virustotal	Browse
www.google.com	0%	Virustotal	Browse
www.amazon.com	0%	Virustotal	Browse
d3ag4hukkh62yn.cloudfront.net	1%	Virustotal	Browse
fp2e7a.wpc.phicdn.net	0%	Virustotal	Browse
account-update-amazon-gift-card-collection.9d6ihdz43.top	12%	Virustotal	Browse
s-part-0017.t-0009.t-msedge.net	0%	Virustotal	Browse

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
bg.microsoft.map.fastly.net	199.232.210.172	true	false	0%, Virustotal, Browse	unknown
account-update-amazon-gift-card-collection.9d6ihdz43.top	47.76.171.224	true	true	12%, Virustotal, Browse	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	0%, Virustotal, Browse	unknown
www.google.com	216.58.206.68	true	false	0%, Virustotal, Browse	unknown
d3ag4hukkh62yn.cloudfront.net	99.86.8.42	true	false	1%, Virustotal, Browse	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	0%, Virustotal, Browse	unknown
www.amazon.com	unknown	unknown	false	0%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Reputation
http://account-update-amazon-gift-card-collection.9d6ihdz43.top/assets/Bottom.0424dd3e.css	true	unknown
http://account-update-amazon-gift-card-collection.9d6ihdz43.top/user/login	true	unknown
http://account-update-amazon-gift-card-collection.9d6ihdz43.top/	true	unknown
http://account-update-amazon-gift-card-collection.9d6ihdz43.top/assets/index.1b92e77c.js	true	unknown
http://account-update-amazon-gift-card-collection.9d6ihdz43.top/favicon.ico	true	unknown
http://account-update-amazon-gift-card-collection.9d6ihdz43.top/assets/warn.2742188e.js	true	unknown
http://account-update-amazon-gift-card-collection.9d6ihdz43.top/assets/index.6c0ee150.css	true	unknown
http://account-update-amazon-gift-card-collection.9d6ihdz43.top/assets/index.e114e1a4.css	true	unknown
http://account-update-amazon-gift-card-collection.9d6ihdz43.top/assets/index.4d461f36.js	true	unknown
http://account-update-amazon-gift-card-collection.9d6ihdz43.top/assets/Bottom.588e34f1.js	true	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved	unknown	unknown	false
47.76.171.224	account-update-amazon-gift-card-collection.9d6ihdz43.top	United States	9500	VODAFONE-TRANSIT-ASVodafoneNZLtdNZ	true
216.58.206.68	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4
192.168.2.6

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1532592
Start date and time:	2024-10-13 18:05:53 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 11s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://account-update-amazon-gift-card-collection.9d6ihdz43.top/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal88.phis.win@16/25@10/5
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.181.227, 142.250.186.110, 66.102.1.84, 34.104.35.123, 142.250.181.234, 142.250.185.106, 142.250.185.138, 172.217.18.106, 216.58.212.138, 142.250.184.234, 216.58.206.42, 142.250.186.74, 172.217.16.138, 142.250.185.170, 172.217.23.106, 142.250.185.234, 142.250.186.138, 142.250.185.202, 216.58.212.170, 142.250.185.74, 4.245.163.56, 199.232.210.172, 192.229.221.95, 52.165.164.15, 216.58.212.131
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, otelrules.afd.azureedge.net, clientservices.googleapis.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: http://account-update-amazon-gift-card-collection.9d6ihdz43.top/user/login Model: gemini-1.5-flash	{ "text": "Sign in Email or mobile phone number Continue By continuing, you agree to Amazon's Conditions of Use and Privacy Notice. Need help? Buying for work? Shop on Amazon Business New to Amazon? Create your Amazon account Conditions of Use Privacy Notice Help 1996-2024, Amazon.com, Inc. or its affiliates", "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Continue", "text_input_field_labels": ["Email or mobile phone number"], "pdf_icon_visible": false, "has_visible_qrcode": false, "has_visible_captcha": false, "has_urgent_text": false} Google indexed: False

URL: http://account-update-amazon-gift-card-collection.9d6ihdz43.top/user/login Model: gemini-1.5-flash	{ "brands": "Amazon"} Google indexed: False
	{ "brands": "Amazon"} Google indexed: False
URL: http://account-update-amazon-gift-card-collection.9d6ihdz43.top/user/login Model: jbxai	{ "brands":["Amazon"], "text":"Sign in Email or mobile phone number Continue By continuing, you agree to Amazon's Conditions of Use and Privacy Notice. Need help? Buying for work? Shop on Amazon Business New to Amazon? Create your Amazon account", "contains_trigger_text":true, "trigger_text":"Continue", "prominent_button_name":"Continue", "text_input_field_labels":["Email or mobile phone number"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: http://account-update-amazon-gift-card-collection.9d6ihdz43.top/user/login Model: gemini-1.5-flash	{ "text": "Sign in Email or mobile phone number Enter your email or mobile phone number Continue By continuing, you agree to Amazon's Conditions of Use and Privacy Notice. Need help? Buying for work? Shop on Amazon Business New to Amazon? Create your Amazon account Conditions of Use Privacy Notice Help 1996-2024, Amazon.com, Inc. or its affiliates", "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Continue", "text_input_field_labels": ["Email or mobile phone number"], "pdf_icon_visible": false, "has_visible_qrcode": false, "has_visible_captcha": false, "has_urgent_text": false} Google indexed: False

URL: http://account-update-amazon-gift-card-collection.9d6ihdz43.top/user/login Model: jbxai	{ "brands":["Amazon"], "text":"Sign in Email or mobile phone number Enter your email or mobile phone number Continue By continuing, you agree to Amazon's Conditions of Use and Privacy Notice. Need help? Buying for work? Shop on Amazon Business New to Amazon? Create your Amazon account", "contains_trigger_text":true, "trigger_text":"Email or mobile phone number", "prominent_button_name":"Continue", "text_input_field_labels":["Email or mobile phone number"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: http://account-update-amazon-gift-card-collection.9d6ihdz43.top/user/login Model: gemini-1.5-flash	{ "brands": "Amazon"} Google indexed: False
	{ "brands": "Amazon"} Google indexed: False
URL: http://account-update-amazon-gift-card-collection.9d6ihdz43.top/user/login Model: jbxai	{ "phishing_score":9, "brands":"Amazon", "legit_domain":"amazon.com", "classification":"wellknown", "reasons":["The brand 'Amazon' is a well-known global e-commerce company.", "The URL 'account-update-amazon-gift-card-collection.9d6ihdz43.top' does not match the legitimate domain 'amazon.com'.", "The domain '9d6ihdz43.top' is suspicious and not associated with Amazon.", "The use of 'amazon' in the subdomain is a common phishing tactic to mislead users.", "The presence of multiple hyphenated words in the subdomain is indicative of phishing attempts.", "The domain extension '.top' is unusual for a legitimate Amazon site."], "brand_matches":[false], "url_match":false, "brand_input":"Amazon", "input_fields":"Email or mobile phone number"}

URL: http://account-update-amazon-gift-card-collection.9d6ihdz43.top/user/login Model: jbxai	{ "phishing_score":9, "brands":"Amazon", "legit_domain":"amazon.com", "classification":"wellknown", "reasons":["The brand 'Amazon' is a well-known global e-commerce company.", "The URL 'account-update-amazon-gift-card-collection.9d6ihdz43.top' does not match the legitimate domain 'amazon.com'.", "The domain '9d6ihdz43.top' is suspicious and not associated with Amazon.", "The use of 'amazon' in the subdomain is a common phishing tactic to mislead users.", "The presence of multiple hyphenated words in the subdomain is indicative of phishing attempts.", "The domain extension '.top' is unusual for a legitimate Amazon site."], "brand_matches":[false], "url_match":false, "brand_input":"Amazon", "input_fields":"Email or mobile phone number"}

URL: http://account-update-amazon-gift-card-collection.9d6ihdz43.top/user/login Model: gemini-1.5-pro-002	{ "legit_domain": "amazon.com", "classification": "wellknown", "reasons": ["The URL \"account-update-amazon-gift-card-collection.9d6ihdz43.top\" is highly suspicious. The domain name \"9d6ihdz43.top\" does not match the legitimate domain name \"amazon.com\" associated with Amazon.", "The URL contains several keywords related to account updates, gift cards, and collections, which are commonly used in phishing attempts to lure victims.", "The structure of the URL with multiple hyphens and a seemingly random subdomain is a strong indicator of a phishing attempt.", "The input field requesting an email or mobile phone number is a common tactic used by phishers to collect sensitive information."], "riskscore": 10} Google indexed: False
URL: account-update-amazon-gift-card-collection.9d6ihdz43.top Brands: A Input Fields: Email or mobile phone number

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 49

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 6730
Category:	downloaded
Size (bytes):	2536
Entropy (8bit):	7.9107206834372406
Encrypted:	false
SSDEEP:	48:XlETD2inLJaQRintUFMVOWJQhFv16OeefCQKI6Kni451qsaeVSKMQ:gkQ0tUFMhWFvpaJI1i4qsaWxD
MD5:	EA8E7DD9340C9A2DD33E6FB5887053BD
SHA1:	07FBF72F4CEC3881B4A302DE763B8002B062B898
SHA-256:	8E9F1A24A02D28CC8A4D6DE67BE1E9F83B97D0D6AE15E1E445BB51E774901898
SHA-512:	9D91CA1846B5158D1E0BFF59D9AE138CD0E98E6A43B8140CA32EA6C2A24D3B98D4FD1074B3A13810B3A1403ED3DE30E1AD4C71A0DC3E19107F309484070BD3EE
Malicious:	false
Reputation:	low
URL:	http://account-update-amazon-gift-card-collection.9d6ihdz43.top/assets/index.4d461f36.js
Preview:	...........Y[w.H.~._!z9.t...\P..K.....p...5m.lu"...c...V.Z............j.'...".Xa=...d.R..4RdJ."...9.L...t..RZ".T...(..L......\..&...cEf....L....".h../.J._.P...\$...i.Wnw.p...... .R^....(.g....v".....t.....7....3.............../....Gp@2.BN.T6.Rd...k....N,&<...W.:#q..)..r... ..qi'..$...g.`I.&~fw.sc.{.eCH...5KY..N.F...a.@....t,p&k..y..l.q.W.....\|<..A.t2.@g.r..*..kFI...4i.sH .i..7mE.!....qK.N..."%........hP..@&8j.+6.6....({.c.0..j..{& ;...NOp....N...m..%....)...)..)...R.=3.vo..>........."...0e.xD..M.Yf...E....w..q...U....G.^.5...FH.......V..3.........._....../..g./.:.w;..ag....../...{.@..z....B3.~&.P=.,..l.^.\|...z.-$.e...&..8=.....-Yk.....B...y..z....b.NY.........u..u5$.!W...>!=.4.....k......D.x.V......0...,.h..x.j.KWL...J(..&.......[..+.,\|...a.E.t\W....u.gI.nr...R..<..... s..uw...L..n .%..'.......,.OhV...q...Sk~....U....Ld.c6.c....K....%=.Y1O.. ...R.GG....z...+..!.`.2k5.5....m...f....8.....=q......G..".f.n..@.b....7.P.e.g.....3.N...g3"z..9.

Chrome Cache Entry: 50

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 5381
Category:	dropped
Size (bytes):	3883
Entropy (8bit):	7.9477154034933255
Encrypted:	false
SSDEEP:	96:L3XPITLaOpGPtjElEz8GDoEkyrIut7pbUPiJDKhw:LHap6GlGoEkwUPbw
MD5:	B18BDA545494653EA449583AD172446C
SHA1:	9BDD7802A45B26EE4033B10004E88BC325CD2374
SHA-256:	54AB87BF23D3A877F0105BF661A764D114BD790C5DCFC083A861E3024D46377D
SHA-512:	21472A276484A9F7F6B56CA08008359FA894D9F1DF52AD1B0F35C08BDA8A4761273C65289E3A8491AB95BA7BB445492A6A3116E951F83BC90B49DC61B6CF4FBD
Malicious:	false
Reputation:	low
Preview:	...........W...Fr..).{...da.L.8.ix1..9G..n......@c...].u:...7.....5.........$^r..w..A.a,....dX.b....A....iD.....".r.=.e...z.b....N/x}....#9e).C+../..Wq.Y.0Xd....~..V-,W._B.x2.xA....@..V..~..-.W:....Y.....aXAfd.).7+X.'X./X.x2L.x.1..7..... >...?\|..4..2.1........ad.e...>.P.x+T..xid..i...x....Q...c...]~.q..D._..%...)....h.g..g...]..........,...................a.?.2 #U%....`X....u...R.1...\|.-..h.@.;.Ua..G......_m..S..r.......WQ..R.....X..R.L`i." ....Gc..Q.3...8....t..]O.!..o...5...w..^"..0..%.;...C..a.)<...6.m.....+...P.6.$............oH......!W.II....8.E.-..+.......fC..}...IQ....V.x!'.._........j......D.z...R.6....tB(%..)....RG...nH....Z.......$.......x.G....d.2}J....3..DR;bT...1.....E...p...7.o.R.@Zp...f....0_P.z....0./(...RKn..k..A....tZ.A..!......Vs..3..!.SG...D5}........T."%...m.IV....N{.[.._..m...)H.fD..<u...Y#....O.......C.\|.w.Sa.zq.5E.M....d.qSd[zj........<.....sb.F..c...Rk..k.V>......p...q.y..1./...{....%...s..Qv.....>.-....t....$i.&.

Chrome Cache Entry: 51

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.137537511266052
Encrypted:	false
SSDEEP:	3:kyY:kL
MD5:	E335F2D7359EB6531E09A075F8EFE20E
SHA1:	0F6A282639D67E525F06752D7AFC2EEE29907B71
SHA-256:	CF60E56FC222A0FCA9F049A7C8CAF4D265771256C5D4B9E3366950471AEF2AA9
SHA-512:	1E7B507F9BC931AEB0517A5D0FB84E4B585AFCDE3C90C03FA550041FB3F1983538F2D39B0CA2B3DC07A015480528D95752FB59C888D71AE6CD30C8E2E88893A4
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmPZ-e7kFj4-xIFDQQEQ-USBQ3_4hdJ?alt=proto
Preview:	ChIKBw0EBEPlGgAKBw3/4hdJGgA=

Chrome Cache Entry: 52

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 711
Category:	downloaded
Size (bytes):	373
Entropy (8bit):	7.4485802545974025
Encrypted:	false
SSDEEP:	6:XtBKd1hXFaT0H4otMpTEql/nOnZqHyZf2988KUIxTW2J2QD4y2GMXM/qSAfS:XLKd1BFaVlEIOnZqqeC8KUIxz2Zy2GM0
MD5:	B120B68A3F341C75DD6C90048F0465AD
SHA1:	7FD6D602094046B3631C2099F921A5D5A22BAC21
SHA-256:	2A6F72E1C52001932F676B9408E86A5612A64A8977AD6295F51A91F4B6DC2B5B
SHA-512:	6F752165618B2E08E2568B0F846A31D8575E5286DF16E96A2035AAADB274F0CEFD8166948B3BADA54EFC054B94B873518B1356EB79E35E757962DDBCDE95201D
Malicious:	false
Reputation:	low
URL:	http://account-update-amazon-gift-card-collection.9d6ihdz43.top/assets/Bottom.0424dd3e.css
Preview:	............?o.0...~..]r.e.w...S..K.NE.'.6.[.h..4.w...p.5]...@....g......v.}...Q.5.oo.m\.G#...u];._D.... ...Z.#......t..z...../@...O0...@gb.g.x.{.P..#8o.=k1.........A...e-Z<`.v...B.n.dt.'eU....c.B..X..-. wB.Dh.....(....m.]\ra..='.f-.B....D.V..3:.........ssvku.OBoHY.(..b.B/.7.4W.R..#N.X HsL......U.$.`...~E...)S..!...i.N.....=#....j..]s5.2.Z?...!v....

Chrome Cache Entry: 53

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 4368
Category:	downloaded
Size (bytes):	2424
Entropy (8bit):	7.918925895404611
Encrypted:	false
SSDEEP:	48:XLBum9nBPxRQezG0e7/9eqeOF71bMq7iLpH9bqAkGrKx8CU2SKsMKH3BPltRN:ZBPxaX0eksF7cLpdjkG2x8CqtLxXRN
MD5:	949F8C8A45C4274E5D8C85A7CE1BEDFD
SHA1:	49CF685F4DCA1DE92AD23C3ACEA2DCFA27568BAE
SHA-256:	BAC91B9BA6D03903A00ED2B8CFA7B2ABC2442A548B81F9B4AF19D0C3FFF5DB83
SHA-512:	448793DF6DB45325592D549F116F567194B0FA8A4C5A8D698E394621F2D1C572041D2A8B16BE5C7C3EDE043CC364BA3F4ADAF163ADAAB33CD073EC078C114508
Malicious:	false
Reputation:	low
URL:	http://account-update-amazon-gift-card-collection.9d6ihdz43.top/assets/Bottom.588e34f1.js
Preview:	...........XY..H.~._aY.n.j.6...f..`.1.0`..J.7.}......3....jU/.<...._DF..PDY....8..I3{.C>.w.f...}.._.l...r..>.69.V+.C\O.....z..Vc=F..xp..O.U{.r.......=...nN.M.....w..h....<.....z..J..P...!.;.,..../NOQ...D...b.vq'6/.I..m......v...4.A,..n....m..TD...w.9...c..HW...z\.'G...\...T..W0.H.{.}......^V.-.U....^.@.D.d.............../..x[zLrh.i..37i~...hV.I.G.$!.w..J-Q.#.n.a...W".....=...,.rhK/3i..NB.b..=....O.~.X.d..Q'.qg..6.....L..9..)=p&Vk:./`.;.D.^X...sS...$.z.IN$.b....&..\/8..+os..."(?......q.].....,h..Vl../..2`}.;y..z......Ku\4.m..s...r....(.....A.j.G.e.i.F..M..i{..Vf..0.T>.0.W...$(.F.&.C.3.W.!.t..f.k.\4...%........x.N.r.]...Ks...t..~\|?-...8..P....D...HT....A....{F.d..:.iP^#].[g8...C.$....!......9.U"....m.@.c#Q.b.%#D..8..U.(..6sQy..x......^$Tq.....:...]..)..a6.U...j...3.fL...i^....C..A......k ..C..e:...0..8.b.#...,.@....f......P.y...!k<..i..v.m.2.9.l......Wg.8.....V..\..BP..R.....2.c.@..,H..l...S.{Q.K=..;.rv.d.......nL.pxf^.1u8...

Chrome Cache Entry: 54

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 4075
Category:	downloaded
Size (bytes):	1041
Entropy (8bit):	7.803821327759901
Encrypted:	false
SSDEEP:	24:Xk6LF+vJ/elS/y5erAAjxiOdJMJYJ9WEU+O5fnWUsB9:XJsx6X5cA2AG/WEdn
MD5:	85186A31F091075DB4B03A8151F98D76
SHA1:	EFC4204E46805EDD9E2920BA3528E801D19F1CA6
SHA-256:	8B9B5D8BB83A61FD9955C0FF319382B7163C613F29CC12714AB2B99D94157A21
SHA-512:	BFB20C92B3AE5D0709C4DF8E2351E7F2AA8B48BE96C6CD26A58DB0449CF4CCB70AF2936A50ED14F07EFE9A306E1BD60E9EC728B1856E061BBF972CFFCA14A172
Malicious:	false
Reputation:	low
URL:	http://account-update-amazon-gift-card-collection.9d6ihdz43.top/assets/index.6c0ee150.css
Preview:	...........WM..6...W.Y.f..l..:%...K.KQ..-.6..(P.G....!e.%.^o..`A&.of......xe..r.....j.."..^..J.~P..!].......<..lJ.J.....,H...p..S....d..W...E..1.-.j[Q.&gv.<..LN..<...d.~r.i.G)M....Fs0..m,m..f)A.MN&.8.....[+.Xh..r...[V..t.....:.[..c.D.......icU..l[..X...f[p\|./.RH......y.H..l.7..........F$$5@'2.+.!UT..3.0S.........Z...,..,.2.e$.a.\d.2.LA..a5..m.n..b.J\..;m...W..<0.N..../.O.@.6.t\.,..^..[.'.]G.X..8...hmr..72.+...x[.i....z..S.......-`T.7".........J...(...A...B_>..T.5.....`..UL.*....%.C...cn.?....N....(..m.?`..H...U2....yX.....W........... .s.t).P..T...1.h.....2..........s..~.=K....P..s..1 ..-....Kc.+\.....j..k.M.....f+q.........&{..._....Qe.0.A..ExD.X..E.....X.....n.......S!............/.i..EM..%). ..D...u.M...T=...P.....".^8.3....x9m..0...n.......I../...}..U.V."_...3..%..Uu..m.a..q.=i.f.o.._...&4...A..377\|.......i.Mb1.w.S....\|.x.@JE.g...A....c....7..7..`.....j..#.....T....0A..Q....8<..g...._2.]..]..]b.~CL.....-...!.y.Q."Z.w$.i.9LwAX

Chrome Cache Entry: 55

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 1126931
Category:	dropped
Size (bytes):	372533
Entropy (8bit):	7.9989849676540805
Encrypted:	true
SSDEEP:	6144:sdHbeQdBDOTNYWlknS2SzHNcPld7ZHorE/RD6fUKdTg8rKjAum:+bxby2bSzHQ1Iri81nrQAP
MD5:	160A171275B4533120114BA2D1C782C2
SHA1:	EC9A215AE6D2D461A8615A551FF27169A36373A9
SHA-256:	B4372127A23930C7FD49B17040ADD0E54470EAB82C7C2151E8B80449A6ABD6A4
SHA-512:	B3EBC9FA9EA2AE3BA259FFA2E7C8C5BE810A2AB16C18E1DFC3341A5FE2D332FB2F1C0559C03E4352E4F174FC03FBC1B9918BEDFF903AA46D5466D6A0BAC7BD5B
Malicious:	false
Reputation:	low
Preview:	...........y_...(...............[ ....,..G.2x.%G..f.....$.....w.{..K.......q...O........{.8..&.0...c....;..E..o.~..6.....A...(..k..{..~.K..z...(........fg..\|..Io!_.+...D.f.R.x....pz...'..>AsY......z...4..p?...D....V.0:.gy..s......$.3.....(...9....M.\|..^.:.N....M.....y...%..(r.....~......9......<....da:.!...d.......U....+W7......&c...j.....fnT...`@eN.N.+......=Z^N....{.Q.'...Y6..i..7u.j..b.......6x...j?..kX..e.~./.H.K.0M.t.D.+..>Q._....$....q@.,\...B..A.U.A.z.+...u.7S2...a..f.$.~^.J.......`.g.W...)..C.+../..jrp...0...l70&........?~[....Ev.@{......6$:W..Z......A7........8....h!.....p.Z..~g..ae0Sa.....>...~{......>..>?..o.....~>o..~{..q...f.I....GQ.Z..#..l..ak..!y+...j.c.M..!.r....C.#.u)..w`....)=-......o...... .m..\X.z...\H.sr.@......M&....\q...gy...k?.q*I.e..y.W...p.,._...0..R....n...G@..y.R.p.W0;..N.g.5.i.'.c.7A...V.S........../..6M..j?._....]X...VB..\|....qv3..y.......`...W.U.7T..WD..).x.......1..H%.E.G...i.p...w1..1.

Chrome Cache Entry: 56

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 17542
Category:	dropped
Size (bytes):	2480
Entropy (8bit):	7.882146248734557
Encrypted:	false
SSDEEP:	48:XawsxYEzf6pacfuLRn9aDvNG+LpBg8+g84bwTc5Yp0NGakHdufh5QzSMf:t4YEzhcfARcDfNf+g84bwOYQkHduDM
MD5:	F4B340C862D53557A370A90BD62A5A39
SHA1:	F4DFF7FFC2716CF9B8269ACC82D0C10168FA8313
SHA-256:	5F1D79FD902804B5A3F0E33F15D8E685B18F3833A7064386BF16287F42FC43BC
SHA-512:	8BD99F28DBC9C206953265684521C657F2ED88C031AEA033345B777640149877BE2019B6BD62C6976B57ACBC82EF351AD62E9C36960B627868E80727F8280721
Malicious:	false
Reputation:	low
Preview:	...........Oh.E......`/.m..V......b......\....E...F.....A.-Hr.....4....D....I..?4Z.J...f..3....n~......y.f.yo.X&:.."....uB.(.....;...<..R......3Btv...;....A....G....:..R..>..R@..}...p8..s.6..6.o......, ._.J...)..J9..I)w.I........-).?,...=k...Tc....)>W..R..4.iQ]c....3...M..@ .....R...W...).{...././_]o...B.w..{P.=.aG..._L.1.n....?R.B.......HLv.1.h...@..R....g.N.9..-&.mX......Uy..I.KN s.....O....1}W...._...{......y.a6.~t.7.......Z`.....7'...v.~/./.(C.KCc}8.........,-.i`. Gs^.P...5..2..ZW....\..T.\CoZ\.K.<.p.'.........'....5....;....................X.=..a...n......g........\|........<X.s......+..Q3...................s..%.u....$.m.....o.Vi.6m.....,..e.KU.7..J....$..O.8r.p../].Lq~Gc..[...e"9o...j.}N_..q`........ao.voY{.....\e....Z..w..]..z.'.S%..?.}..v....h....iP.....t.`.Fz.^?.l.8..u.j....Dv.{.../_n....0..&. .{./...5...^...vo...e..n....~........._..X.%......\|.S.]`N.. .<{..o....v..z........(...k.R.u.~L9#.4.....G.6..k...Sr./........

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 6730
Category:	dropped
Size (bytes):	2536
Entropy (8bit):	7.9107206834372406
Encrypted:	false
SSDEEP:	48:XlETD2inLJaQRintUFMVOWJQhFv16OeefCQKI6Kni451qsaeVSKMQ:gkQ0tUFMhWFvpaJI1i4qsaWxD
MD5:	EA8E7DD9340C9A2DD33E6FB5887053BD
SHA1:	07FBF72F4CEC3881B4A302DE763B8002B062B898
SHA-256:	8E9F1A24A02D28CC8A4D6DE67BE1E9F83B97D0D6AE15E1E445BB51E774901898
SHA-512:	9D91CA1846B5158D1E0BFF59D9AE138CD0E98E6A43B8140CA32EA6C2A24D3B98D4FD1074B3A13810B3A1403ED3DE30E1AD4C71A0DC3E19107F309484070BD3EE
Malicious:	false
Reputation:	low
Preview:	...........Y[w.H.~._!z9.t...\P..K.....p...5m.lu"...c...V.Z............j.'...".Xa=...d.R..4RdJ."...9.L...t..RZ".T...(..L......\..&...cEf....L....".h../.J._.P...\$...i.Wnw.p...... .R^....(.g....v".....t.....7....3.............../....Gp@2.BN.T6.Rd...k....N,&<...W.:#q..)..r... ..qi'..$...g.`I.&~fw.sc.{.eCH...5KY..N.F...a.@....t,p&k..y..l.q.W.....\|<..A.t2.@g.r..*..kFI...4i.sH .i..7mE.!....qK.N..."%........hP..@&8j.+6.6....({.c.0..j..{& ;...NOp....N...m..%....)...)..)...R.=3.vo..>........."...0e.xD..M.Yf...E....w..q...U....G.^.5...FH.......V..3.........._....../..g./.:.w;..ag....../...{.@..z....B3.~&.P=.,..l.^.\|...z.-$.e...&..8=.....-Yk.....B...y..z....b.NY.........u..u5$.!W...>!=.4.....k......D.x.V......0...,.h..x.j.KWL...J(..&.......[..+.,\|...a.E.t\W....u.gI.nr...R..<..... s..uw...L..n .%..'.......,.OhV...q...Sk~....U....Ld.c6.c....K....%=.Y1O.. ...R.GG....z...+..!.`.2k5.5....m...f....8.....=q......G..".f.n..@.b....7.P.e.g.....3.N...g3"z..9.

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 407
Category:	downloaded
Size (bytes):	284
Entropy (8bit):	7.203808298853624
Encrypted:	false
SSDEEP:	6:Xt4fba4X8ldwVmCK8GKK8Nzbh0c0sG+aWWfyC9xjI2JCpipwXr4L1rR2N:X3W8lcmCfEU6cL/5cyC991JhosprQN
MD5:	0718835CB2F2E6BC2269509F3E5D66AC
SHA1:	DCF047CC94ED4365ACE26E46352FA8DCBB2BD436
SHA-256:	CAFF00AEBD0ECD146A2ACEC0C09A790113A68EC2A2D024B5C0FA49DDDBCD2D06
SHA-512:	28EDE44F35D114160C06B99C8EE942F8F468B28C66B123D87F941175D51A833ABDF9C3475289BD80E277FFA813BBDAC140DAFD3CF7958D8CFEA25635E9D7A10F
Malicious:	false
Reputation:	low
URL:	http://account-update-amazon-gift-card-collection.9d6ihdz43.top/
Preview:	..........]Q.N.0.<._a\|..A........8...Yp......I(..x5....Z]<<.o.^.E...j,.p.......q..T.l.mL"`-_.O..)...c.....hc..I...~.E>N.I$......]L,E.0.,zD.v..`5.K...._.5.tU\....C}...T9..O6a......}z..).......3.sP...WQ.n.a...;.Z...Y4...5.....T..*..,...wuj..0.9..:-M.6...:S....?.#p....

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 5381
Category:	downloaded
Size (bytes):	3883
Entropy (8bit):	7.9477154034933255
Encrypted:	false
SSDEEP:	96:L3XPITLaOpGPtjElEz8GDoEkyrIut7pbUPiJDKhw:LHap6GlGoEkwUPbw
MD5:	B18BDA545494653EA449583AD172446C
SHA1:	9BDD7802A45B26EE4033B10004E88BC325CD2374
SHA-256:	54AB87BF23D3A877F0105BF661A764D114BD790C5DCFC083A861E3024D46377D
SHA-512:	21472A276484A9F7F6B56CA08008359FA894D9F1DF52AD1B0F35C08BDA8A4761273C65289E3A8491AB95BA7BB445492A6A3116E951F83BC90B49DC61B6CF4FBD
Malicious:	false
Reputation:	low
URL:	http://account-update-amazon-gift-card-collection.9d6ihdz43.top/assets/warn.2742188e.js
Preview:	...........W...Fr..).{...da.L.8.ix1..9G..n......@c...].u:...7.....5.........$^r..w..A.a,....dX.b....A....iD.....".r.=.e...z.b....N/x}....#9e).C+../..Wq.Y.0Xd....~..V-,W._B.x2.xA....@..V..~..-.W:....Y.....aXAfd.).7+X.'X./X.x2L.x.1..7..... >...?\|..4..2.1........ad.e...>.P.x+T..xid..i...x....Q...c...]~.q..D._..%...)....h.g..g...]..........,...................a.?.2 #U%....`X....u...R.1...\|.-..h.@.;.Ua..G......_m..S..r.......WQ..R.....X..R.L`i." ....Gc..Q.3...8....t..]O.!..o...5...w..^"..0..%.;...C..a.)<...6.m.....+...P.6.$............oH......!W.II....8.E.-..+.......fC..}...IQ....V.x!'.._........j......D.z...R.6....tB(%..)....RG...nH....Z.......$.......x.G....d.2}J....3..DR;bT...1.....E...p...7.o.R.@Zp...f....0_P.z....0./(...RKn..k..A....tZ.A..!......Vs..3..!.SG...D5}........T."%...m.IV....N{.[.._..m...)H.fD..<u...Y#....O.......C.\|.w.Sa.zq.5E.M....d.qSd[zj........<.....sb.F..c...Rk..k.V>......p...q.y..1./...{....%...s..Qv.....>.-....t....$i.&.

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 4368
Category:	dropped
Size (bytes):	2424
Entropy (8bit):	7.918925895404611
Encrypted:	false
SSDEEP:	48:XLBum9nBPxRQezG0e7/9eqeOF71bMq7iLpH9bqAkGrKx8CU2SKsMKH3BPltRN:ZBPxaX0eksF7cLpdjkG2x8CqtLxXRN
MD5:	949F8C8A45C4274E5D8C85A7CE1BEDFD
SHA1:	49CF685F4DCA1DE92AD23C3ACEA2DCFA27568BAE
SHA-256:	BAC91B9BA6D03903A00ED2B8CFA7B2ABC2442A548B81F9B4AF19D0C3FFF5DB83
SHA-512:	448793DF6DB45325592D549F116F567194B0FA8A4C5A8D698E394621F2D1C572041D2A8B16BE5C7C3EDE043CC364BA3F4ADAF163ADAAB33CD073EC078C114508
Malicious:	false
Reputation:	low
Preview:	...........XY..H.~._aY.n.j.6...f..`.1.0`..J.7.}......3....jU/.<...._DF..PDY....8..I3{.C>.w.f...}.._.l...r..>.69.V+.C\O.....z..Vc=F..xp..O.U{.r.......=...nN.M.....w..h....<.....z..J..P...!.;.,..../NOQ...D...b.vq'6/.I..m......v...4.A,..n....m..TD...w.9...c..HW...z\.'G...\...T..W0.H.{.}......^V.-.U....^.@.D.d.............../..x[zLrh.i..37i~...hV.I.G.$!.w..J-Q.#.n.a...W".....=...,.rhK/3i..NB.b..=....O.~.X.d..Q'.qg..6.....L..9..)=p&Vk:./`.;.D.^X...sS...$.z.IN$.b....&..\/8..+os..."(?......q.].....,h..Vl../..2`}.;y..z......Ku\4.m..s...r....(.....A.j.G.e.i.F..M..i{..Vf..0.T>.0.W...$(.F.&.C.3.W.!.t..f.k.\4...%........x.N.r.]...Ks...t..~\|?-...8..P....D...HT....A....{F.d..:.iP^#].[g8...C.$....!......9.U"....m.@.c#Q.b.%#D..8..U.(..6sQy..x......^$Tq.....:...]..)..a6.U...j...3.fL...i^....C..A......k ..C..e:...0..8.b.#...,.@....f......P.y...!k<..i..v.m.2.9.l......Wg.8.....V..\..BP..R.....2.c.@..,H..l...S.{Q.K=..;.rv.d.......nL.pxf^.1u8...

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 358368
Category:	downloaded
Size (bytes):	49155
Entropy (8bit):	7.991856634881487
Encrypted:	true
SSDEEP:	1536:VtL8mzvAlwGOVnPj/8Lc2IenhI8fVweLOa3N:VqeGOp8ienmGWeLHN
MD5:	8684E2C828B95041AF57202703062611
SHA1:	106D743E7BB92A2300BBF87C965C79BF16320D78
SHA-256:	8AB3BDCE846EDAB22E3AFF035EB2DA34A8FF299A2DAE72780839A8942FD72D89
SHA-512:	1A5D94E2AB710A324A27596F802942DDC3A19E85B8FFD02D5064720CA5F762FBA3ACFB226DDA5947975B95D7EC4D5B81B63CD35819338B61E619695F574E0E9B
Malicious:	false
Reputation:	low
URL:	http://account-update-amazon-gift-card-collection.9d6ihdz43.top/assets/index.e114e1a4.css
Preview:	...........i.c9n(.}~.u..*.h-!.v....K{.....r..].sC...S!.I........ .p.R.b..]..K..H. ...={jv..P}./..w..Ww....f...?......x}1..V._.......[....e.{\..^..f.....f.......O...q.\..S.\|\|:../....S..ay......u3...=.:.\|..a3.\|\|nv......s.\....v.\|.}Xmf..<....Z.....w.....}.._.v..+..\?..X..f?.)$.w...n..\|..../.V..@...r...y.....?..A.......><.6/.y...n..f...p_.........a...;...y.]o.. }..k......iw.Q..j..../...a.Y?J\|?I..6+...l3o.....}.-$h.fn.8{..b..F{._.&_.....m7...t.....;...r.j.......]8..bB}1..1...f.....\|~...>.Z.././...\o_.....Y..3......b.o.Z..v.<@.....Ydp.c.6.W9.Q....[....>\|.......k....a.x^.~8...l.m.@..[.KA....7?...e_/..v..&.....j..{...m3...........B.G...M..~<n^.\|.n..W...!.....b....Q#w1f......%.j....J...^..>..C..C.......r~x.......iyhk.en..c.b......n.YM..a.E.>{jg..:f.4.....e;.........9T.HL Co...u.4d.u...f....z.=.+..$&.NMR.Y,.d.....).....,...X...e..4s.(.a.....e....j....g..?._W.=.....?..5..&.~Z.........fs8.u........B.....b....?.a.[rD.......?.\.G..l......

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 1126931
Category:	downloaded
Size (bytes):	372533
Entropy (8bit):	7.9989849676540805
Encrypted:	true
SSDEEP:	6144:sdHbeQdBDOTNYWlknS2SzHNcPld7ZHorE/RD6fUKdTg8rKjAum:+bxby2bSzHQ1Iri81nrQAP
MD5:	160A171275B4533120114BA2D1C782C2
SHA1:	EC9A215AE6D2D461A8615A551FF27169A36373A9
SHA-256:	B4372127A23930C7FD49B17040ADD0E54470EAB82C7C2151E8B80449A6ABD6A4
SHA-512:	B3EBC9FA9EA2AE3BA259FFA2E7C8C5BE810A2AB16C18E1DFC3341A5FE2D332FB2F1C0559C03E4352E4F174FC03FBC1B9918BEDFF903AA46D5466D6A0BAC7BD5B
Malicious:	false
Reputation:	low
URL:	http://account-update-amazon-gift-card-collection.9d6ihdz43.top/assets/index.1b92e77c.js
Preview:	...........y_...(...............[ ....,..G.2x.%G..f.....$.....w.{..K.......q...O........{.8..&.0...c....;..E..o.~..6.....A...(..k..{..~.K..z...(........fg..\|..Io!_.+...D.f.R.x....pz...'..>AsY......z...4..p?...D....V.0:.gy..s......$.3.....(...9....M.\|..^.:.N....M.....y...%..(r.....~......9......<....da:.!...d.......U....+W7......&c...j.....fnT...`@eN.N.+......=Z^N....{.Q.'...Y6..i..7u.j..b.......6x...j?..kX..e.~./.H.K.0M.t.D.+..>Q._....$....q@.,\...B..A.U.A.z.+...u.7S2...a..f.$.~^.J.......`.g.W...)..C.+../..jrp...0...l70&........?~[....Ev.@{......6$:W..Z......A7........8....h!.....p.Z..~g..ae0Sa.....>...~{......>..>?..o.....~>o..~{..q...f.I....GQ.Z..#..l..ak..!y+...j.c.M..!.r....C.#.u)..w`....)=-......o...... .m..\X.z...\H.sr.@......M&....\q...gy...k?.q*I.e..y.W...p.,._...0..R....n...G@..y.R.p.W0;..N.g.5.i.'.c.7A...V.S........../..6M..j?._....]X...VB..\|....qv3..y.......`...W.U.7T..WD..).x.......1..H%.E.G...i.p...w1..1.

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 17542
Category:	downloaded
Size (bytes):	2480
Entropy (8bit):	7.882146248734557
Encrypted:	false
SSDEEP:	48:XawsxYEzf6pacfuLRn9aDvNG+LpBg8+g84bwTc5Yp0NGakHdufh5QzSMf:t4YEzhcfARcDfNf+g84bwOYQkHduDM
MD5:	F4B340C862D53557A370A90BD62A5A39
SHA1:	F4DFF7FFC2716CF9B8269ACC82D0C10168FA8313
SHA-256:	5F1D79FD902804B5A3F0E33F15D8E685B18F3833A7064386BF16287F42FC43BC
SHA-512:	8BD99F28DBC9C206953265684521C657F2ED88C031AEA033345B777640149877BE2019B6BD62C6976B57ACBC82EF351AD62E9C36960B627868E80727F8280721
Malicious:	false
Reputation:	low
URL:	http://account-update-amazon-gift-card-collection.9d6ihdz43.top/favicon.ico
Preview:	...........Oh.E......`/.m..V......b......\....E...F.....A.-Hr.....4....D....I..?4Z.J...f..3....n~......y.f.yo.X&:.."....uB.(.....;...<..R......3Btv...;....A....G....:..R..>..R@..}...p8..s.6..6.o......, ._.J...)..J9..I)w.I........-).?,...=k...Tc....)>W..R..4.iQ]c....3...M..@ .....R...W...).{...././_]o...B.w..{P.=.aG..._L.1.n....?R.B.......HLv.1.h...@..R....g.N.9..-&.mX......Uy..I.KN s.....O....1}W...._...{......y.a6.~t.7.......Z`.....7'...v.~/./.(C.KCc}8.........,-.i`. Gs^.P...5..2..ZW....\..T.\CoZ\.K.<.p.'.........'....5....;....................X.=..a...n......g........\|........<X.s......+..Q3...................s..%.u....$.m.....o.Vi.6m.....,..e.KU.7..J....$..O.8r.p../].Lq~Gc..[...e"9o...j.}N_..q`........ao.voY{.....\e....Z..w..]..z.'.S%..?.}..v....h....iP.....t.`.Fz.^?.l.8..u.j....Dv.{.../_n....0..&. .{./...5...^...vo...e..n....~........._..X.%......\|.S.]`N.. .<{..o....v..z........(...k.R.u.~L9#.4.....G.6..k...Sr./........

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 13, 2024 18:06:50.269393921 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 13, 2024 18:06:52.007544041 CEST	49737	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:52.007977962 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:52.012551069 CEST	80	49737	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:52.012650013 CEST	49737	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:52.012828112 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:52.012892008 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:52.012953997 CEST	49737	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:52.017735958 CEST	80	49737	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:52.273706913 CEST	49739	443	192.168.2.4	216.58.206.68
Oct 13, 2024 18:06:52.273755074 CEST	443	49739	216.58.206.68	192.168.2.4
Oct 13, 2024 18:06:52.273848057 CEST	49739	443	192.168.2.4	216.58.206.68
Oct 13, 2024 18:06:52.274049044 CEST	49739	443	192.168.2.4	216.58.206.68
Oct 13, 2024 18:06:52.274059057 CEST	443	49739	216.58.206.68	192.168.2.4
Oct 13, 2024 18:06:52.924468040 CEST	443	49739	216.58.206.68	192.168.2.4
Oct 13, 2024 18:06:52.924802065 CEST	49739	443	192.168.2.4	216.58.206.68
Oct 13, 2024 18:06:52.924820900 CEST	443	49739	216.58.206.68	192.168.2.4
Oct 13, 2024 18:06:52.925853968 CEST	443	49739	216.58.206.68	192.168.2.4
Oct 13, 2024 18:06:52.925925016 CEST	49739	443	192.168.2.4	216.58.206.68
Oct 13, 2024 18:06:52.927889109 CEST	49739	443	192.168.2.4	216.58.206.68
Oct 13, 2024 18:06:52.927966118 CEST	443	49739	216.58.206.68	192.168.2.4
Oct 13, 2024 18:06:52.939380884 CEST	80	49737	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:52.939513922 CEST	80	49737	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:52.939604998 CEST	49737	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:52.959106922 CEST	49737	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:52.964133978 CEST	80	49737	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:52.965074062 CEST	49740	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:52.965301991 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:52.970061064 CEST	80	49740	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:52.970136881 CEST	49740	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:52.970170021 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:52.970406055 CEST	49740	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:52.974272013 CEST	49739	443	192.168.2.4	216.58.206.68
Oct 13, 2024 18:06:52.974284887 CEST	443	49739	216.58.206.68	192.168.2.4
Oct 13, 2024 18:06:52.975317001 CEST	80	49740	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.019860029 CEST	49739	443	192.168.2.4	216.58.206.68
Oct 13, 2024 18:06:53.292898893 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.292937994 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.292973995 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.292984009 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:53.293011904 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.293066978 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.293266058 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.293299913 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.293313980 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:53.293313980 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:53.293334961 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.293369055 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.293391943 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:53.293405056 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.293448925 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:53.298026085 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.298083067 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.298115969 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.298142910 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:53.349772930 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:53.517921925 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.517972946 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.518029928 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.518045902 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:53.518064022 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.518117905 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.518150091 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.518179893 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:53.518203020 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.518223047 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:53.518251896 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.518290043 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.518321037 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:53.518922091 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.518975973 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.518980980 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:53.519010067 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.519109964 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:53.519483089 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.519536018 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.519587040 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.519619942 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.519663095 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.519681931 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:53.519681931 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:53.520241022 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.520303011 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:53.520318031 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.520351887 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.520706892 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:53.742846966 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.742944002 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.742980003 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.743016005 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.743048906 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.743057966 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:53.743083954 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.743089914 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:53.743119955 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.743133068 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:53.743155956 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.743187904 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.743222952 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.743237972 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:53.743275881 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:53.743843079 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.743899107 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.743931055 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.743968964 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.743983030 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:53.744014978 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:53.744411945 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.744468927 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.744502068 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.744550943 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:53.744606018 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.744638920 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.744653940 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:53.744674921 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.746922016 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:53.882597923 CEST	80	49740	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.882672071 CEST	80	49740	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.882708073 CEST	80	49740	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.882740974 CEST	80	49740	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.882776022 CEST	80	49740	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.882808924 CEST	80	49740	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.882843971 CEST	80	49740	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.882844925 CEST	49740	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:53.882877111 CEST	80	49740	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.882888079 CEST	49740	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:53.882899046 CEST	49740	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:53.882916927 CEST	80	49740	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.882927895 CEST	49740	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:53.882956028 CEST	80	49740	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.886933088 CEST	49740	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:53.887773037 CEST	80	49740	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.887840033 CEST	80	49740	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.888452053 CEST	49740	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:53.968177080 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.968251944 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.968286991 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.968322992 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.968322039 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:53.968358994 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.968378067 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:53.968411922 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.968447924 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.968466043 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:53.968482971 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.968518972 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.968569994 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:53.968612909 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.968662024 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:53.968668938 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.968703985 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.968822002 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.968856096 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.968868017 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:53.968892097 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.968900919 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:53.968925953 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.969080925 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:53.969623089 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.969656944 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.969691992 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.969708920 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:53.969727993 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:53.969938993 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:53.993670940 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 13, 2024 18:06:53.993715048 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 13, 2024 18:06:53.993793011 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 13, 2024 18:06:53.995472908 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 13, 2024 18:06:53.995490074 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 13, 2024 18:06:54.057265997 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.102551937 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.108129978 CEST	80	49740	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.108176947 CEST	80	49740	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.108194113 CEST	80	49740	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.108236074 CEST	49740	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.108280897 CEST	80	49740	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.108325958 CEST	49740	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.108434916 CEST	80	49740	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.108516932 CEST	80	49740	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.108531952 CEST	80	49740	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.108547926 CEST	80	49740	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.108566999 CEST	49740	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.108594894 CEST	49740	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.108659029 CEST	80	49740	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.109332085 CEST	80	49740	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.109380007 CEST	49740	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.109399080 CEST	80	49740	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.109415054 CEST	80	49740	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.109458923 CEST	49740	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.109502077 CEST	80	49740	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.110049009 CEST	80	49740	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.110095978 CEST	49740	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.110110044 CEST	80	49740	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.110126972 CEST	80	49740	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.110241890 CEST	80	49740	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.110260963 CEST	80	49740	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.110277891 CEST	49740	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.110305071 CEST	49740	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.111078024 CEST	80	49740	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.111505032 CEST	80	49740	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.111548901 CEST	49740	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.192507982 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.192670107 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.192698956 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.192725897 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.192733049 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.192766905 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.192785025 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.192800999 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.192833900 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.192868948 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.192877054 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.192903996 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.192912102 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.192939043 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.193022966 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.193519115 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.193605900 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.193639040 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.193689108 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.193695068 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.193727970 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.193742990 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.194057941 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.194111109 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.194112062 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.194145918 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.194226980 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.194262028 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.194269896 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.194295883 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.194617987 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.242831945 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.334172964 CEST	80	49740	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.334247112 CEST	80	49740	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.334300041 CEST	80	49740	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.334307909 CEST	49740	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.334335089 CEST	80	49740	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.334378004 CEST	80	49740	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.334428072 CEST	80	49740	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.334438086 CEST	49740	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.334461927 CEST	80	49740	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.334479094 CEST	49740	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.334496975 CEST	80	49740	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.334533930 CEST	80	49740	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.334583998 CEST	49740	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.335159063 CEST	80	49740	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.335227966 CEST	49740	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.335242033 CEST	80	49740	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.335297108 CEST	49740	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.336316109 CEST	49740	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.341116905 CEST	80	49740	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.417563915 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.417592049 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.417607069 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.417685032 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.417691946 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.417743921 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.417752028 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.417759895 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.417891026 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.417906046 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.417931080 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.417953968 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.418164968 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.418332100 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.418344975 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.418391943 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.418414116 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.418428898 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.418442965 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.418452978 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.418462038 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.418484926 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.418720007 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.418735981 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.418751955 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.418761969 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.418787956 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.419202089 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.419265985 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.419281006 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.419317961 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.419348955 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.419392109 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.642602921 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.642648935 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.642703056 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.642719984 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.642754078 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.642786026 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.642819881 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.642853022 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.642864943 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.642864943 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.642889023 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.642920017 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.642944098 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.642951965 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.642988920 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.642992973 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.643349886 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.643393040 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.643405914 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.643420935 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.643467903 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.643481016 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.643637896 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.643742085 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.643758059 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.643773079 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.643796921 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.643796921 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.643872023 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.644186974 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.644563913 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.644610882 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.644610882 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.699553013 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 13, 2024 18:06:54.699698925 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 13, 2024 18:06:54.714426994 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 13, 2024 18:06:54.714457989 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 13, 2024 18:06:54.714920044 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 13, 2024 18:06:54.731743097 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.758318901 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 13, 2024 18:06:54.773161888 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.803401947 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 13, 2024 18:06:54.867556095 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.867588043 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.867604017 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.867619038 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.867635012 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.867714882 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.867729902 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.867748022 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.867759943 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.867760897 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.867786884 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.867856979 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.867880106 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.867897987 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.867913008 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.867949963 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.867949963 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.868083954 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.868522882 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.868577003 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.868597031 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.868662119 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.868676901 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.868690968 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.868731022 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.868731022 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:54.868834019 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.868849993 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:54.869055986 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.022329092 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 13, 2024 18:06:55.022396088 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 13, 2024 18:06:55.022449970 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 13, 2024 18:06:55.022617102 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 13, 2024 18:06:55.022634983 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 13, 2024 18:06:55.022644997 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 13, 2024 18:06:55.022650003 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 13, 2024 18:06:55.058759928 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 13, 2024 18:06:55.058796883 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 13, 2024 18:06:55.058862925 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 13, 2024 18:06:55.059273958 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 13, 2024 18:06:55.059288979 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 13, 2024 18:06:55.092322111 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.092360020 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.092375040 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.092463970 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.092478991 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.092494965 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.092504025 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.092504025 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.092510939 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.092958927 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.092969894 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.092973948 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.092989922 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.093007088 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.093028069 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.093028069 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.093377113 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.093391895 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.093416929 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.093432903 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.093444109 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.093449116 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.093465090 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.093488932 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.093488932 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.093864918 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.093929052 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.093945026 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.093988895 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.093988895 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.094082117 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.094096899 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.094110966 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.094477892 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.144578934 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.318404913 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.318433046 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.318448067 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.318480015 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.318568945 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.318583965 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.318599939 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.318614960 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.318636894 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.318636894 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.318794012 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.318809032 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.318825006 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.318859100 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.318859100 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.318928003 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.318942070 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.319029093 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.319045067 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.319060087 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.319075108 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.319078922 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.319078922 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.319089890 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.319106102 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.319148064 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.319148064 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.319456100 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.319472075 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.319837093 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.319948912 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.319963932 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.320177078 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.542747021 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.542772055 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.542798042 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.542813063 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.542829990 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.542845011 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.542849064 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.542862892 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.542896032 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.542896032 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.542990923 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.543008089 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.543107986 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.543122053 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.543158054 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.543158054 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.543196917 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.543212891 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.543296099 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.543308973 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.543322086 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.543402910 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.543505907 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.543523073 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.543576002 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.543591022 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.543606043 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.543612957 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.543612957 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.543621063 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.543637037 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.543673992 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.543673992 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.544377089 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.544439077 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.544852972 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.767508984 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.767538071 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.767554998 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.767570019 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.767585039 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.767600060 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.767612934 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.767616987 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.767654896 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.767772913 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.767788887 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.767812967 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.767872095 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.767885923 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.767925024 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.768013000 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.768028021 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.768042088 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.768057108 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.768071890 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.768084049 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.768130064 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.768456936 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.768532991 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.768578053 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.768616915 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.768675089 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.768688917 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.768702984 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.768724918 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.768738985 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.768855095 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.768870115 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.768908024 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.777971029 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 13, 2024 18:06:55.778037071 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 13, 2024 18:06:55.779258013 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 13, 2024 18:06:55.779268980 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 13, 2024 18:06:55.779551983 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 13, 2024 18:06:55.780605078 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 13, 2024 18:06:55.827406883 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 13, 2024 18:06:55.992273092 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.992295980 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.992324114 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.992341995 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.992345095 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.992357969 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.992376089 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.992383957 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.992393970 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.992422104 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.992439032 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.992472887 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.992650986 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.992743015 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.992759943 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.992786884 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.992908955 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.992924929 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.992942095 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.992948055 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.992958069 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.992983103 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.993324995 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.993350983 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.993366957 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.993366957 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.993382931 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.993418932 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.993550062 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.993566990 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.993593931 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.993697882 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.993714094 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.993729115 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.993743896 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.993752003 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.993777990 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:55.994210005 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:55.994327068 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:56.112768888 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 13, 2024 18:06:56.112837076 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 13, 2024 18:06:56.112919092 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 13, 2024 18:06:56.114229918 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 13, 2024 18:06:56.114248991 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 13, 2024 18:06:56.114259958 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 13, 2024 18:06:56.114264965 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 13, 2024 18:06:56.217169046 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.217192888 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.217211962 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.217236996 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.217252016 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.217283010 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:56.217324018 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:56.217339993 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.217355013 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.217391014 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:56.217519999 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.217535973 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.217550993 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.217566013 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.217566967 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:56.217581034 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.217593908 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:56.217622995 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:56.217818975 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.217852116 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.217885017 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.217936039 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:56.218211889 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.218262911 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:56.218266964 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.218301058 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.218430996 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.218462944 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.218485117 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:56.218497038 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.218509912 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:56.218529940 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.218625069 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.218660116 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.218672991 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:56.218723059 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:56.448327065 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.448353052 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.448369026 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.448385954 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.448461056 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:56.448518038 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:56.448545933 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.448606968 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.448621988 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.448657036 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:56.448698044 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.448733091 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.448739052 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:56.448851109 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.448864937 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.448882103 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.448909044 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:56.448930979 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:56.448986053 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.449069023 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.449084997 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.449110985 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:56.449209929 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.449224949 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.449258089 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:56.449407101 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.449445963 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:56.449475050 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.449490070 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.449635983 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.449651003 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.449666977 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.449676991 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:56.449681044 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.449704885 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:56.449721098 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:56.449848890 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.449865103 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.449907064 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:56.450180054 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.450229883 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:56.450643063 CEST	49738	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:56.457947969 CEST	80	49738	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.600142002 CEST	49743	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:56.601751089 CEST	49744	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:56.602186918 CEST	49745	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:56.602590084 CEST	49746	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:56.603200912 CEST	49747	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:56.605353117 CEST	80	49743	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.605484009 CEST	49743	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:56.605673075 CEST	49743	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:56.606755972 CEST	80	49744	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.606873989 CEST	49744	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:56.607004881 CEST	49744	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:56.607062101 CEST	80	49745	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.607429981 CEST	80	49746	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.607521057 CEST	49745	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:56.607652903 CEST	49746	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:56.607652903 CEST	49746	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:56.607700109 CEST	49745	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:56.608130932 CEST	80	49747	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.608206034 CEST	49747	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:56.608294964 CEST	49747	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:56.610871077 CEST	80	49743	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.611991882 CEST	80	49744	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.612607956 CEST	80	49746	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.612657070 CEST	80	49745	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:56.613164902 CEST	80	49747	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:57.037506104 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:57.042725086 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:57.042813063 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:57.043142080 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:57.048051119 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:57.508120060 CEST	80	49744	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:57.508143902 CEST	80	49744	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:57.508171082 CEST	80	49744	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:57.508364916 CEST	49744	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:57.508364916 CEST	49744	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:57.509520054 CEST	49744	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:57.514348984 CEST	80	49744	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:57.517940998 CEST	80	49743	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:57.517976046 CEST	80	49743	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:57.518045902 CEST	49743	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:57.518728971 CEST	49743	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:57.523602009 CEST	80	49743	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:57.524282932 CEST	49749	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:57.529232979 CEST	80	49749	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:57.529334068 CEST	49749	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:57.529498100 CEST	49749	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:57.533652067 CEST	80	49745	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:57.533689022 CEST	80	49745	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:57.533721924 CEST	80	49745	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:57.533746958 CEST	49745	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:57.533750057 CEST	80	49745	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:57.533828020 CEST	49745	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:57.534358978 CEST	80	49749	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:57.534636021 CEST	49745	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:57.538609982 CEST	80	49746	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:57.538657904 CEST	80	49746	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:57.538671017 CEST	80	49746	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:57.538686991 CEST	80	49746	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:57.538727045 CEST	49746	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:57.538767099 CEST	49746	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:57.538815975 CEST	80	49746	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:57.538872004 CEST	49746	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:57.538908005 CEST	49750	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:57.539330959 CEST	80	49747	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:57.539380074 CEST	80	49747	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:57.539397955 CEST	80	49747	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:57.539448023 CEST	80	49747	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:57.539443970 CEST	49747	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:57.539521933 CEST	49747	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:57.539526939 CEST	80	49747	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:57.539537907 CEST	80	49745	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:57.539577007 CEST	49747	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:57.539905071 CEST	49746	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:57.542574883 CEST	49747	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:57.543685913 CEST	80	49750	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:57.543783903 CEST	49750	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:57.544049978 CEST	49750	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:57.544698954 CEST	80	49746	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:57.547432899 CEST	80	49747	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:57.549232960 CEST	80	49750	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:57.556010962 CEST	49751	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:57.557424068 CEST	49752	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:57.561009884 CEST	80	49751	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:57.561121941 CEST	49751	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:57.561289072 CEST	49751	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:57.562320948 CEST	80	49752	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:57.562393904 CEST	49752	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:57.562527895 CEST	49752	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:57.566128969 CEST	80	49751	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:57.567377090 CEST	80	49752	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:57.962874889 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:57.962938070 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:57.962977886 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:57.962996006 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:57.963012934 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:57.963052988 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:57.963064909 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:57.963087082 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:57.963121891 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:57.963129997 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:57.963156939 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:57.963191986 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:57.963200092 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:57.963229895 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:57.963283062 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:57.968117952 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:57.968153000 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:57.968187094 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:57.968204975 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.020355940 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.193711042 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.193792105 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.193808079 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.193821907 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.193830013 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.193924904 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.194047928 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.194102049 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.194139957 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.194155931 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.194199085 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.194246054 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.194261074 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.194303036 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.194945097 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.195024967 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.195039988 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.195070982 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.195137024 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.195152044 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.195188999 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.195991039 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.196006060 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.196019888 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.196049929 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.196070910 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.196080923 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.237915993 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.424025059 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.424042940 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.424058914 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.424132109 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.424139023 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.424155951 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.424171925 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.424181938 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.424216986 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.424319983 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.424336910 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.424374104 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.424947023 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.425015926 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.425031900 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.425056934 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.425139904 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.425156116 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.425170898 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.425177097 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.425206900 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.425724983 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.425781965 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.425797939 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.425822020 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.425920010 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.425934076 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.425949097 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.425961018 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.425986052 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.426477909 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.446651936 CEST	80	49749	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.446815968 CEST	80	49749	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.446831942 CEST	80	49749	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.446847916 CEST	80	49749	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.446872950 CEST	49749	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.446914911 CEST	49749	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.449743032 CEST	80	49750	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.449776888 CEST	80	49750	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.449790955 CEST	80	49750	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.449815035 CEST	80	49750	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.449816942 CEST	49750	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.449852943 CEST	49750	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.449974060 CEST	80	49750	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.450016975 CEST	49750	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.472671032 CEST	80	49752	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.472717047 CEST	80	49752	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.472729921 CEST	80	49752	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.472762108 CEST	49752	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.472778082 CEST	80	49752	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.472791910 CEST	80	49752	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.472820044 CEST	49752	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.472971916 CEST	80	49752	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.473016977 CEST	49752	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.474535942 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.503365993 CEST	80	49751	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.503524065 CEST	80	49751	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.503540039 CEST	80	49751	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.503557920 CEST	80	49751	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.503571987 CEST	49751	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.503614902 CEST	49751	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.593138933 CEST	49749	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.595340014 CEST	49750	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.596081972 CEST	49751	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.597950935 CEST	80	49749	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.600097895 CEST	80	49750	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.600900888 CEST	80	49751	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.627445936 CEST	49752	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.632215023 CEST	80	49752	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.654947996 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.654964924 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.654989958 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.655004978 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.655020952 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.655035019 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.655085087 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.655122995 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.655148029 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.655163050 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.655164003 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.655201912 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.655282021 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.655297041 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.655335903 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.655606985 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.655659914 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.655674934 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.655700922 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.655771971 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.655818939 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.655858040 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.655874968 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.655891895 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.655910969 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.656384945 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.656435013 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.656441927 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.656456947 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.656491995 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.656536102 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.656552076 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.656589985 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.671797991 CEST	49754	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.676736116 CEST	80	49754	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.676842928 CEST	49754	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.677081108 CEST	49754	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.682188988 CEST	80	49754	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.743654966 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.787050009 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.886341095 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.886360884 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.886377096 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.886411905 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.886538029 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.886554003 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.886569023 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.886579037 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.886601925 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.886607885 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.886619091 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.886635065 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.886667967 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.886805058 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.886821032 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.886835098 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.886851072 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.886852980 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.886873960 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.887048960 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.887063026 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.887085915 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.887089014 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.887100935 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.887118101 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.887128115 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.887156010 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:58.887526035 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:58.941317081 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:59.117033005 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.117089987 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.117125988 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.117155075 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:59.117157936 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.117192984 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.117208958 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:59.117225885 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.117269039 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:59.117307901 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.117363930 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.117398024 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.117414951 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:59.117433071 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.117470026 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.117484093 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:59.117505074 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.117556095 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:59.117646933 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.117680073 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.117712975 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.117723942 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:59.117748976 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.117784023 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.117799044 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:59.117820024 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.117871046 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:59.118262053 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.160082102 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:59.347352028 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.347418070 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.347455025 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.347471952 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:59.347489119 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.347524881 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.347574949 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:59.347584009 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.347637892 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.347642899 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:59.347677946 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.347719908 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.347726107 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:59.347754955 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.347800016 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:59.348035097 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.348088980 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.348121881 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.348135948 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:59.348176956 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.348211050 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.348228931 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:59.348481894 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.348531961 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:59.348535061 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.348567963 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.348618984 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:59.348706007 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.348758936 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.348809958 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:59.348810911 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.348845005 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.348889112 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:59.349167109 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.394454002 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:59.578562021 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.578615904 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.578649998 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.578684092 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.578717947 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.578751087 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.578784943 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.578820944 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.578829050 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:59.578829050 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:59.578829050 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:59.578855038 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.578907013 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:59.578959942 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.578994036 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.579047918 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:59.579082966 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.579116106 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.579138994 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:59.579152107 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.579186916 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.579207897 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:59.579464912 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.579499960 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.579521894 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:59.579760075 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.579812050 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:59.579814911 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.579847097 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.579900980 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:59.588741064 CEST	80	49754	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.588773966 CEST	80	49754	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.588807106 CEST	80	49754	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.588843107 CEST	49754	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:59.589534998 CEST	80	49754	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.590914011 CEST	49754	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:59.809555054 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.809639931 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.809676886 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.809710026 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.809743881 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.809796095 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.809828997 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.809833050 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:59.809833050 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:59.809860945 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.809896946 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.809930086 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.809947968 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:59.809947968 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:59.809962988 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.809981108 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:59.810003042 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.810180902 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.810266018 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.810285091 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:59.810300112 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.810364962 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:59.810435057 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.810468912 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.810487986 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:59.810503006 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.810558081 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:59.810636044 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.810667992 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.810708046 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.810729980 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:06:59.811160088 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.811193943 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:06:59.811273098 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.040491104 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.040621996 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.040678024 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.040719986 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.040756941 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.040790081 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.040837049 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.040844917 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.040844917 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.040894032 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.040929079 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.040961027 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.040993929 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.041026115 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.041060925 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.041095018 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.041127920 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.041127920 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.041127920 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.041127920 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.041131973 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.041152954 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.041229010 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.041301012 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.041336060 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.041368008 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.041438103 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.041451931 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.041470051 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.041477919 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.041522026 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.041522026 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.041536093 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.057434082 CEST	49754	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.062916994 CEST	80	49754	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.270992041 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.271018028 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.271035910 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.271097898 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.271133900 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.271150112 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.271164894 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.271200895 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.271280050 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.271281958 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.271364927 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.271378994 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.271430016 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.271511078 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.271526098 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.271541119 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.271557093 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.271578074 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.271578074 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.271729946 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.271744967 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.271786928 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.272123098 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.272176981 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.272212029 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.272227049 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.272322893 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.272330046 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.272337914 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.272397995 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.272572041 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.272623062 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.272634983 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.272680998 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.502171040 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.502218962 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.502276897 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.502310038 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.502348900 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.502388000 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.502423048 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.502454042 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.502466917 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.502466917 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.502487898 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.502521992 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.502552986 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.502553940 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.502590895 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.502655029 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.502746105 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.502779961 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.502814054 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.502840042 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.502901077 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.502921104 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.502954960 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.502988100 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.503010988 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.503329992 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.503367901 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.503408909 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.503446102 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.503479958 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.503514051 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.503514051 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.503552914 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.503647089 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.550756931 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.732963085 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.733031988 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.733067036 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.733083010 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.733100891 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.733138084 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.733175039 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.733191013 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.733226061 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.733232975 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.733259916 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.733294010 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.733305931 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.733329058 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.733374119 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.733378887 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.733418941 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.733452082 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.733463049 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.733486891 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.733535051 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.734122992 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.734194994 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.734230042 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.734245062 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.734265089 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.734301090 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.734311104 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.734334946 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.734369040 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.734380960 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.734401941 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.734440088 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.734453917 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.734791994 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.734836102 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.963397980 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.963430882 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.963442087 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.963454962 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.963468075 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.963480949 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.963529110 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.963546991 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.963561058 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.963591099 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.963606119 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.963618994 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.963649035 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.964034081 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.964046001 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.964057922 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.964087009 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.964108944 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.964138985 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.964150906 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.964162111 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.964174032 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.964184999 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.964193106 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.964205027 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.964624882 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.964673996 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.964698076 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.964709997 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.964750051 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.964819908 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.964832067 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.964869022 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.965147018 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.965159893 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.965202093 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:00.965231895 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.965244055 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.965261936 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:00.965291023 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:01.020308971 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:01.194540024 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:01.194557905 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:01.194570065 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:01.194624901 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:01.194648027 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:01.194662094 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:01.194690943 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:01.194744110 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:01.194756985 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:01.194786072 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:01.194909096 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:01.194921017 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:01.194931984 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:01.194942951 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:01.194951057 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:01.194956064 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:01.194979906 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:01.195007086 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:01.195182085 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:01.195194960 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:01.195205927 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:01.195244074 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:01.195534945 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:01.195554018 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:01.195566893 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:01.195575953 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:01.195601940 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:01.195736885 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:01.195749044 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:01.195760012 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:01.195774078 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:01.195782900 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:01.195822001 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:01.195959091 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:01.195971012 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:01.196005106 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:01.196326971 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:01.196374893 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:01.201673985 CEST	49748	80	192.168.2.4	47.76.171.224
Oct 13, 2024 18:07:01.206547976 CEST	80	49748	47.76.171.224	192.168.2.4
Oct 13, 2024 18:07:02.816627979 CEST	443	49739	216.58.206.68	192.168.2.4
Oct 13, 2024 18:07:02.816706896 CEST	443	49739	216.58.206.68	192.168.2.4
Oct 13, 2024 18:07:02.816808939 CEST	49739	443	192.168.2.4	216.58.206.68
Oct 13, 2024 18:07:03.913027048 CEST	49739	443	192.168.2.4	216.58.206.68
Oct 13, 2024 18:07:03.913058996 CEST	443	49739	216.58.206.68	192.168.2.4
Oct 13, 2024 18:07:06.313786983 CEST	80	49723	41.63.96.128	192.168.2.4
Oct 13, 2024 18:07:06.313905001 CEST	49723	80	192.168.2.4	41.63.96.128
Oct 13, 2024 18:07:06.313905001 CEST	49723	80	192.168.2.4	41.63.96.128
Oct 13, 2024 18:07:06.318773985 CEST	80	49723	41.63.96.128	192.168.2.4
Oct 13, 2024 18:07:06.318792105 CEST	80	49723	41.63.96.128	192.168.2.4
Oct 13, 2024 18:07:06.318851948 CEST	49723	80	192.168.2.4	41.63.96.128
Oct 13, 2024 18:07:21.519123077 CEST	80	49724	41.63.96.128	192.168.2.4
Oct 13, 2024 18:07:21.519237041 CEST	49724	80	192.168.2.4	41.63.96.128
Oct 13, 2024 18:07:21.520745039 CEST	49724	80	192.168.2.4	41.63.96.128
Oct 13, 2024 18:07:21.525490046 CEST	80	49724	41.63.96.128	192.168.2.4
Oct 13, 2024 18:07:43.034303904 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:43.034349918 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:43.034468889 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:43.034802914 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:43.034817934 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:43.718821049 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:43.718904018 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:43.722697020 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:43.722711086 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:43.723102093 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:43.731170893 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:43.775401115 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:43.838376045 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:43.838493109 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:43.838532925 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:43.838555098 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:43.838570118 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:43.838597059 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:43.838613033 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:43.922574043 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:43.922629118 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:43.922657967 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:43.922674894 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:43.922715902 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:43.922734976 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:43.924335003 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:43.924413919 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:43.924427032 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:43.924494982 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:44.010888100 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:44.010934114 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:44.010972023 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:44.010982037 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:44.011010885 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:44.011039972 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:44.011682987 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:44.011738062 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:44.011765003 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:44.011770964 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:44.011790991 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:44.011812925 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:44.012793064 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:44.012835026 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:44.012866020 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:44.012873888 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:44.012898922 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:44.012918949 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:44.014138937 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:44.014183044 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:44.014210939 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:44.014216900 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:44.014236927 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:44.014256001 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:44.099601030 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:44.099646091 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:44.099678993 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:44.099703074 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:44.099719048 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:44.099782944 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:44.100940943 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:44.100982904 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:44.101012945 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:44.101017952 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:44.101042032 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:44.101063013 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:44.101777077 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:44.101819038 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:44.101845026 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:44.101850033 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:44.101876020 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:44.101892948 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:44.103244066 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:44.103283882 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:44.103306055 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:44.103313923 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:44.103332043 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:44.103353977 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:44.104428053 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:44.104470015 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:44.104487896 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:44.104496002 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:44.104525089 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:44.104542971 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:44.105354071 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:44.105395079 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:44.105418921 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:44.105423927 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:44.105443954 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:44.105460882 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:44.105551958 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:44.105614901 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:44.105621099 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:44.105674982 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:44.105680943 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:44.105710983 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:44.105743885 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:44.152256966 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:44.152303934 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:44.152376890 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:44.153115988 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:44.153161049 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:44.153223991 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:44.154556036 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:44.154658079 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:44.154726028 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:44.154738903 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:44.154773951 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:44.154963017 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:44.154975891 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:44.155989885 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:44.156083107 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:44.156243086 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:44.156377077 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:44.156414032 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:44.160092115 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:44.160114050 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:44.160243034 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:44.160260916 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:44.160269976 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:44.160491943 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:44.160516024 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:45.266432047 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:45.267014027 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:45.267045975 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:45.267666101 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:45.267669916 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:45.271915913 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:45.272320986 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:45.272399902 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:45.272690058 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:45.272705078 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:45.274446011 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:45.274454117 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:45.274516106 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:45.274804115 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:45.274835110 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:45.274842024 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:45.274868965 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:45.275219917 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:45.275255919 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:45.275355101 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:45.275363922 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:45.275548935 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:45.275578976 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:45.275927067 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:45.275932074 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:45.370799065 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:45.370856047 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:45.370923042 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:45.370934010 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:45.371031046 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:45.371037006 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:45.371056080 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:45.371134996 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:45.371292114 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:45.371292114 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:45.371308088 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:45.371316910 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:45.374631882 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:45.374679089 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:45.374861002 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:45.375057936 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:45.375077009 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:45.375096083 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:45.375184059 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:45.375252962 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:45.375319958 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:45.375370026 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:45.375370026 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:45.375426054 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:45.375447989 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:45.375457048 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:45.375509977 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:45.375582933 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:45.375598907 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:45.375627995 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:45.375633001 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:45.377247095 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:45.377300024 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:45.377362967 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:45.377374887 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:45.377418995 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:45.377420902 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:45.377465963 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:45.377870083 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:45.377928972 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:45.377935886 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:45.377954006 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:45.377983093 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:45.377990007 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:45.377995014 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:45.378012896 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:45.378065109 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:45.378078938 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:45.378079891 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:45.378146887 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:45.378159046 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:45.378196955 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:45.378210068 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:45.378273010 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:45.378309965 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:45.378334999 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:45.378362894 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:45.378362894 CEST	49768	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:45.378364086 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:45.378376961 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:45.378390074 CEST	443	49768	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:45.380636930 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:45.380661011 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:45.380712032 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:45.380739927 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:45.380755901 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:45.380814075 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:45.380912066 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:45.380939960 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:45.380965948 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:45.380989075 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.034153938 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.034805059 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.034845114 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.035279989 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.035286903 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.039280891 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.039839983 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.039855957 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.040184975 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.040205956 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.040211916 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.040515900 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.040529013 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.040808916 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.040813923 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.054033041 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.054419041 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.054441929 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.054785013 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.054790974 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.073681116 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.074100018 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.074114084 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.074668884 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.074675083 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.135675907 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.135737896 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.135813951 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.136037111 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.136056900 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.136071920 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.136080027 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.139019012 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.139058113 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.139142036 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.139405012 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.139417887 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.140117884 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.140185118 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.140260935 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.140357018 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.140372992 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.140384912 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.140391111 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.140922070 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.141077042 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.141139030 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.141299963 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.141299963 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.141307116 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.141315937 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.142939091 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.142970085 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.143069029 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.143223047 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.143223047 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.143239975 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.143248081 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.143362045 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.143582106 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.143591881 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.159549952 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.159600019 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.159735918 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.159768105 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.159787893 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.159800053 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.159806967 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.161837101 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.161847115 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.161917925 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.162133932 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.162144899 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.180160999 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.180311918 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.180387974 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.180424929 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.180430889 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.180453062 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.180458069 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.182992935 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.183083057 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.183166027 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.183433056 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.183473110 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.786727905 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.788120985 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.788158894 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.790055037 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.790061951 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.795731068 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.796653032 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.796665907 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.797774076 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.797781944 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.817476988 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.818433046 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.818449020 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.819519043 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.819524050 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.846596956 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.847333908 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.847348928 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.848165035 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.848170996 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.849750996 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.850390911 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.850455046 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.851166964 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.851182938 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.887582064 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.887670994 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.887726068 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.888235092 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.888262033 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.888297081 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.888305902 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.898734093 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.898802996 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.898849964 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.899290085 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.899328947 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.899409056 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.899883986 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.899903059 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.899915934 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.899923086 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.901591063 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.901606083 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.906502962 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.906512976 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.906578064 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.906997919 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.907007933 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.921991110 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.922143936 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.922211885 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.937031984 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.937067986 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.937107086 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.937117100 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.945913076 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.946001053 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.946089029 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.946755886 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.946789980 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.952611923 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.952760935 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.952816963 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.953001022 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.953033924 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.953057051 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.953064919 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.953094006 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.953241110 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.953366041 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.955424070 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.955424070 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.955451012 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.955471992 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.963026047 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.963093996 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.963185072 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.963452101 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.963479996 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.967125893 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.967219114 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:46.967302084 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.967580080 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:46.967616081 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:47.551727057 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:47.561990023 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:47.562002897 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:47.562899113 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:47.562903881 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:47.612174988 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:47.613235950 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:47.624378920 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:47.627799034 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:47.632694960 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:47.632710934 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:47.633434057 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:47.633439064 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:47.634299040 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:47.634335041 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:47.635020971 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:47.635027885 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:47.635363102 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:47.635425091 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:47.636017084 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:47.636032104 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:47.636709929 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:47.636765003 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:47.637654066 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:47.637665987 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:47.702621937 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:47.702696085 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:47.702792883 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:47.703263998 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:47.703283072 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:47.709707022 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:47.709759951 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:47.709969044 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:47.710207939 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:47.710221052 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:47.733612061 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:47.733702898 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:47.733803034 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:47.733973980 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:47.734052896 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:47.734127998 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:47.734236002 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:47.734261990 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:47.734276056 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:47.734283924 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:47.734563112 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:47.734605074 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:47.734644890 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:47.734663963 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:47.737083912 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:47.737160921 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:47.737260103 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:47.737291098 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:47.737361908 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:47.737426996 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:47.738850117 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:47.738872051 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:47.738884926 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:47.738890886 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:47.741019011 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:47.741039991 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:47.741184950 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:47.741199970 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:47.745995045 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:47.746084929 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:47.746177912 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:47.747452974 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:47.747493029 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:47.749597073 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:47.749699116 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:47.749834061 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:47.750500917 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:47.750538111 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:47.751548052 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:47.751602888 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:47.751760960 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:47.752887011 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:47.752916098 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:47.753047943 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:47.753091097 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:47.753125906 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:47.753460884 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:47.753490925 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:48.364541054 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:48.386384010 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:48.386483908 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:48.387381077 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:48.387418985 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:48.422570944 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:48.422641993 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:48.423794031 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:48.423814058 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:48.424339056 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:48.424381018 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:48.425506115 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:48.425512075 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:48.426281929 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:48.426305056 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:48.427169085 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:48.427175045 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:48.428704023 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:48.428709984 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:48.429533958 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:48.429539919 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:48.430160999 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:48.430171967 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:48.430681944 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:48.430686951 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:48.484901905 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:48.484999895 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:48.485424042 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:48.485977888 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:48.486013889 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:48.502453089 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:48.502490997 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:48.502552032 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:48.503793001 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:48.503808975 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:48.522715092 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:48.522793055 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:48.522840023 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:48.523279905 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:48.523307085 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:48.523319960 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:48.523328066 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:48.523546934 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:48.523634911 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:48.523993969 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:48.524101019 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:48.524118900 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:48.524130106 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:48.524136066 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:48.526825905 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:48.526901007 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:48.526953936 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:48.527170897 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:48.527241945 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:48.527293921 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:48.527461052 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:48.527467012 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:48.530672073 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:48.530685902 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:48.530698061 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:48.530703068 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:48.557230949 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:48.557274103 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:48.557349920 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:48.576530933 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:48.576546907 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:48.584331989 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:48.584358931 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:48.584441900 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:48.584614992 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:48.584639072 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:48.587704897 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:48.587730885 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:48.587959051 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:48.589179039 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:48.589193106 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:48.590621948 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:48.590658903 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:48.590713978 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:48.591515064 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:48.591536045 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:49.166014910 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:49.167368889 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:49.167388916 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:49.169087887 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:49.169095039 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:49.222592115 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:49.223851919 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:49.223882914 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:49.224857092 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:49.224864960 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:49.244812965 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:49.245588064 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:49.245594978 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:49.246507883 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:49.246511936 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:49.252214909 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:49.252759933 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:49.252774954 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:49.253567934 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:49.253576040 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:49.268562078 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:49.268639088 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:49.268714905 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:49.268889904 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:49.268909931 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:49.268928051 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:49.268933058 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:49.272017956 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:49.272070885 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:49.272170067 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:49.272316933 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:49.272330046 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:49.284260035 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:49.284621000 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:49.284638882 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:49.285159111 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:49.285164118 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:49.323506117 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:49.323576927 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:49.323630095 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:49.323765993 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:49.323776007 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:49.323787928 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:49.323792934 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:49.326703072 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:49.326720953 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:49.326781988 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:49.326917887 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:49.326925039 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:49.348237038 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:49.348288059 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:49.348356009 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:49.348663092 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:49.348668098 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:49.348751068 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:49.348756075 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:49.352880001 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:49.352931976 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:49.353013039 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:49.353297949 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:49.353312016 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:49.356513023 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:49.356553078 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:49.356620073 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:49.358846903 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:49.358860970 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:49.362231970 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:49.362298965 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:49.362385988 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:49.362592936 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:49.362627983 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:49.390798092 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:49.390950918 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:49.391108036 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:49.391108036 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:49.391108036 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:49.393567085 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:49.393601894 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:49.393662930 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:49.393811941 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:49.393826008 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:49.706873894 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:49.706902027 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:49.928796053 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:49.929605007 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:49.929624081 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:49.942987919 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:49.942995071 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:49.976952076 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:49.980007887 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:49.980026007 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:49.981826067 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:49.981831074 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.039612055 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.039700031 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.039777994 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.046530962 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.049194098 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.049207926 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.051079988 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.052218914 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.052242994 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.053550005 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.053559065 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.054518938 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.054579020 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.055232048 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.055244923 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.058545113 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.058588982 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.058821917 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.059084892 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.059099913 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.079392910 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.079467058 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.079535007 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.079937935 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.079945087 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.080002069 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.080007076 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.080634117 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.083466053 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.083479881 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.084502935 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.084506989 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.088594913 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.088634968 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.088839054 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.089046955 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.089063883 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.152220964 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.152288914 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.152384996 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.152913094 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.152931929 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.161046028 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.161101103 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.161206961 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.161910057 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.162002087 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.162098885 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.162436962 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.162451982 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.164700985 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.164715052 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.167989969 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.168056011 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.168143988 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.168772936 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.168804884 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.183909893 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.184068918 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.184379101 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.184433937 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.184458971 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.184472084 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.184478045 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.190650940 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.190691948 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.191015959 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.191215038 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.191241980 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.771780968 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.772365093 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.772387981 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.773375988 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.773384094 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.774662971 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.775213957 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.775298119 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.776559114 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.776575089 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.814611912 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.815237045 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.815267086 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.815792084 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.815797091 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.818257093 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.818618059 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.818669081 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.819158077 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.819168091 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.875022888 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.875097036 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.875399113 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.875468969 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.875488043 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.875510931 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.875518084 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.876672983 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.876729012 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.876811028 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.877075911 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.877124071 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.877154112 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.877171993 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.879349947 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.879394054 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.879520893 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.879713058 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.879729033 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.879991055 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.880017996 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.880084991 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.880259991 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.880274057 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.882344961 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.882791996 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.882802963 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.883359909 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.883364916 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.919400930 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.919471979 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.919554949 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.919786930 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.919800043 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.919975996 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.920051098 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.920104980 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.920337915 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.920351028 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.920363903 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.920370102 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.923310995 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.923346996 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.923587084 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.923587084 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.923597097 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.923803091 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.923803091 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.923820019 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.924001932 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.924015999 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.989176035 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.989342928 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.989443064 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.989665031 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.989679098 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.989717960 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.989722967 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.993257046 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.993279934 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:50.993383884 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.993563890 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:50.993576050 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:51.533715010 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:51.534414053 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:51.534461021 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:51.535128117 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:51.535135984 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:51.540901899 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:51.541415930 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:51.541460037 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:51.542056084 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:51.542068005 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:51.573363066 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:51.573622942 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:51.574003935 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:51.574024916 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:51.574153900 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:51.574168921 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:51.575010061 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:51.575015068 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:51.575174093 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:51.575177908 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:51.638415098 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:51.638503075 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:51.638596058 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:51.638984919 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:51.639012098 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:51.639028072 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:51.639035940 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:51.641808033 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:51.642401934 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:51.642432928 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:51.642725945 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:51.642765045 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:51.642832994 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:51.642909050 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:51.642916918 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:51.643129110 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:51.643146992 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:51.646203041 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:51.646261930 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:51.646308899 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:51.646406889 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:51.646423101 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:51.646435022 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:51.646441936 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:51.649159908 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:51.649197102 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:51.649277925 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:51.649476051 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:51.649492025 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:51.675327063 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:51.675415039 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:51.675493002 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:51.675544024 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:51.675570011 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:51.675679922 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:51.675810099 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:51.675811052 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:51.675828934 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:51.675839901 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:51.675854921 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:51.675854921 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:51.675863028 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:51.675872087 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:51.678889036 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:51.678945065 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:51.679095030 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:51.679120064 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:51.679160118 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:51.679223061 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:51.679307938 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:51.679327011 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:51.679474115 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:51.679492950 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:51.747575998 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:51.747761011 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:51.747838974 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:51.749114037 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:51.749147892 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:51.749193907 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:51.749212027 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:51.758630991 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:51.758666992 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:51.758759975 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:51.758943081 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:51.758956909 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:52.224761009 CEST	49817	443	192.168.2.4	216.58.206.68
Oct 13, 2024 18:07:52.224812984 CEST	443	49817	216.58.206.68	192.168.2.4
Oct 13, 2024 18:07:52.224898100 CEST	49817	443	192.168.2.4	216.58.206.68
Oct 13, 2024 18:07:52.225213051 CEST	49817	443	192.168.2.4	216.58.206.68
Oct 13, 2024 18:07:52.225230932 CEST	443	49817	216.58.206.68	192.168.2.4
Oct 13, 2024 18:07:52.300379992 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:52.301160097 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:52.301188946 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:52.301820040 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:52.301826954 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:52.331932068 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:52.332546949 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:52.332592964 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:52.333162069 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:52.333172083 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:52.353177071 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:52.353703022 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:52.353770018 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:52.354325056 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:52.354341030 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:52.369134903 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:52.369666100 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:52.369699001 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:52.370218039 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:52.370223999 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:52.418946981 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:52.419044018 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:52.419097900 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:52.419331074 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:52.419358969 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:52.419374943 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:52.419382095 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:52.422002077 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:52.422837973 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:52.422877073 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:52.422897100 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:52.422899961 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:52.422987938 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:52.423121929 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:52.423161030 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:52.423518896 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:52.423527956 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:52.432874918 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:52.432955027 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:52.433027029 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:52.433372021 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:52.433372021 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:52.433417082 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:52.433444023 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:52.438463926 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:52.438510895 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:52.438582897 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:52.438776970 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:52.438793898 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:52.461946964 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:52.462119102 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:52.462197065 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:52.462284088 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:52.462306023 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:52.462316990 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:52.462323904 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:52.465497017 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:52.465554953 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:52.465620995 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:52.465789080 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:52.465807915 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:52.475276947 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:52.475459099 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:52.475518942 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:52.475549936 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:52.475569010 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:52.475584030 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:52.475590944 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:52.478251934 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:52.478311062 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:52.478383064 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:52.478573084 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:52.478591919 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:52.523453951 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:52.523639917 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:52.523731947 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:52.523873091 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:52.523873091 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:52.523910999 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:52.523936033 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:52.527141094 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:52.527193069 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:52.527277946 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:52.527482033 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:52.527510881 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:52.873126030 CEST	443	49817	216.58.206.68	192.168.2.4
Oct 13, 2024 18:07:52.873490095 CEST	49817	443	192.168.2.4	216.58.206.68
Oct 13, 2024 18:07:52.873508930 CEST	443	49817	216.58.206.68	192.168.2.4
Oct 13, 2024 18:07:52.873961926 CEST	443	49817	216.58.206.68	192.168.2.4
Oct 13, 2024 18:07:52.874305964 CEST	49817	443	192.168.2.4	216.58.206.68
Oct 13, 2024 18:07:52.874392033 CEST	443	49817	216.58.206.68	192.168.2.4
Oct 13, 2024 18:07:52.925647020 CEST	49817	443	192.168.2.4	216.58.206.68
Oct 13, 2024 18:07:53.072568893 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.073216915 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.073254108 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.074088097 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.074101925 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.091161966 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.091969967 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.092003107 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.092720032 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.092737913 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.133205891 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.133732080 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.133795023 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.134313107 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.134326935 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.142960072 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.147201061 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.147254944 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.147815943 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.147833109 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.174834967 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.174916029 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.175031900 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.175252914 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.175278902 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.175295115 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.175302982 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.177664042 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.178570032 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.178606033 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.179368973 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.179394007 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.179893970 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.179948092 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.180048943 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.180187941 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.180216074 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.191724062 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.191826105 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.191885948 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.192126036 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.192173004 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.192214966 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.192229986 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.195421934 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.195461988 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.195524931 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.195637941 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.195653915 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.236394882 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.236552954 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.236697912 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.236780882 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.236803055 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.236813068 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.236819029 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.239984989 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.240005970 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.240139008 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.240310907 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.240318060 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.250720024 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.250869036 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.250937939 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.250988007 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.251010895 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.251027107 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.251034021 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.253699064 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.253715038 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.253802061 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.254054070 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.254066944 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.280502081 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.280649900 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.280880928 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.280903101 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.280913115 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.280940056 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.280942917 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.283746958 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.283796072 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.283866882 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.284007072 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.284027100 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.857705116 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.858340025 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.858376026 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.858866930 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.858872890 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.867837906 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.868351936 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.868369102 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.868792057 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.868796110 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.922502041 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.923134089 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.923214912 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.923851967 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.923885107 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.940399885 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.940977097 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.941019058 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.941498041 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.941504002 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.947052956 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.947494030 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.947515965 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.947957993 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.947963953 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.962510109 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.962589025 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.962654114 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.962945938 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.962974072 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.962992907 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.963000059 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.966571093 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.966607094 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.966672897 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.966845036 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.966859102 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.970031023 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.970118046 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.970197916 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.970305920 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.970313072 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.970335960 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.970340967 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.973345041 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.973392010 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:53.973459005 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.973601103 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:53.973615885 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:54.027211905 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:54.027287006 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:54.027398109 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:54.027610064 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:54.027610064 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:54.027653933 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:54.027683020 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:54.030801058 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:54.030822992 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:54.031024933 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:54.031357050 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:54.031373024 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:54.042793036 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:54.042845964 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:54.042897940 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:54.043138027 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:54.043163061 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:54.043181896 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:54.043190002 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:54.046364069 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:54.046385050 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:54.046462059 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:54.046667099 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:54.046679974 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:54.054163933 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:54.054224014 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:54.054299116 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:54.054474115 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:54.054478884 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:54.054490089 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:54.054495096 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:54.056967020 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:54.057003975 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:54.057086945 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:54.057358980 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:54.057378054 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:54.950033903 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:54.950879097 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:54.951574087 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:54.951615095 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:54.952142000 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:54.952147007 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:54.953149080 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:54.953156948 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:54.954040051 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:54.954045057 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:54.955575943 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:54.956130981 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:54.956160069 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:54.957129002 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:54.957135916 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:54.969374895 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:54.970539093 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:54.970566034 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:54.972081900 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:54.972122908 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:54.976097107 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:54.977147102 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:54.977174044 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:54.978148937 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:54.978154898 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.052510977 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.052587986 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.052916050 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.053253889 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.053267956 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.053307056 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.053313017 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.055613995 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.055684090 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.056070089 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.057940006 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.058064938 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.058135986 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.059037924 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.059082985 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.059170961 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.059175968 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.059178114 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.059187889 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.059190989 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.060918093 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.060937881 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.062644005 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.062658072 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.066188097 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.066198111 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.066422939 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.068748951 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.068792105 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.068844080 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.068857908 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.068896055 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.069858074 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.069873095 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.074287891 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.074374914 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.074467897 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.074604988 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.074614048 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.074625969 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.074630022 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.078308105 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.078349113 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.078525066 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.079090118 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.079106092 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.082179070 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.082241058 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.082685947 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.082916021 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.082926989 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.085741997 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.085788965 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.085861921 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.086024046 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.086044073 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.714390039 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.715044022 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.715061903 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.715562105 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.715567112 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.717473984 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.717852116 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.717859983 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.718240023 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.718244076 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.724215031 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.724663973 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.724685907 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.725267887 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.725275993 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.727225065 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.727644920 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.727720022 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.728028059 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.728048086 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.735296011 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.735893011 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.735914946 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.736179113 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.736187935 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.842470884 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.842539072 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.842619896 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.842766047 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.842874050 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.842894077 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.842904091 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.842909098 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.842930079 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.842994928 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.843215942 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.843234062 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.843276978 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.843285084 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.843693972 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.843785048 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.843856096 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.843913078 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.844074965 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.844156981 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.844719887 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.844719887 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.844722986 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.844748020 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.844764948 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.844794989 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.846714020 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.846760035 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.846911907 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.847556114 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.847590923 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.847719908 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.847909927 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.847932100 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.848058939 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.848263025 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.848268032 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.848284006 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.848288059 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.848920107 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.848957062 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.849056005 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.849118948 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.849143028 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.850100994 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.850115061 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.850332022 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.850347042 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.850544930 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.850615025 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.850689888 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.850860119 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.850893021 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.851423979 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.851448059 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:55.851521015 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.851666927 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:55.851692915 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:56.510862112 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:56.512079000 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:56.512099028 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:56.513181925 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:56.513196945 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:56.514657974 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:56.514954090 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:56.514955997 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:56.515181065 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:56.515202045 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:56.515851021 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:56.515857935 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:56.516303062 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:56.516309977 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:56.517056942 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:56.517060995 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:56.517688036 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:56.517730951 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:56.518877983 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:56.518904924 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:56.530096054 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:56.530643940 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:56.530658960 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:56.531380892 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:56.531392097 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:56.611974001 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:56.612158060 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:56.612212896 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:56.612752914 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:56.612781048 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:56.612795115 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:56.612802029 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:56.617706060 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:56.617782116 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:56.617804050 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:56.617844105 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:56.617902994 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:56.617974997 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:56.618004084 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:56.618072033 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:56.618268967 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:56.621383905 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:56.621424913 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:56.621486902 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:56.621941090 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:56.621954918 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:56.621968031 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:56.621973991 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:56.625658989 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:56.625680923 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:56.625727892 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:56.625732899 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:56.626077890 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:56.626082897 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:56.626104116 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:56.626111031 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:56.630223989 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:56.630240917 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:56.635067940 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:56.635133028 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:56.635349989 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:56.635899067 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:56.635942936 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:56.636025906 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:56.636666059 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:56.636678934 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:56.639229059 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:56.639322996 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:56.639523983 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:56.639873028 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:56.639894009 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:56.639909029 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:56.639915943 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:56.643167973 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:56.643201113 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:56.647149086 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:56.647187948 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:56.647283077 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:56.649080992 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:56.649115086 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:56.649226904 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:56.649578094 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:56.649590969 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:56.650641918 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:56.650676012 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:57.275861025 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:57.276437044 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:57.276477098 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:57.277017117 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:57.277024984 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:57.311007023 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:57.311674118 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:57.311690092 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:57.312186956 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:57.312195063 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:57.320108891 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:57.320491076 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:57.320513964 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:57.320983887 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:57.320988894 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:57.323352098 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:57.323674917 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:57.323692083 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:57.324093103 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:57.324104071 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:57.338751078 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:57.339202881 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:57.339222908 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:57.339737892 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:57.339745045 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:57.376884937 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:57.376940966 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:57.377079010 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:57.377145052 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:57.377258062 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:57.377274036 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:57.377285957 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:57.377293110 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:57.383234024 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:57.383275032 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:57.383369923 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:57.383867025 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:57.383883953 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:57.415839911 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:57.415940046 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:57.416085958 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:57.416649103 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:57.416676998 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:57.421078920 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:57.421128988 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:57.421261072 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:57.421570063 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:57.421592951 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:57.425149918 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:57.425235987 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:57.425317049 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:57.425700903 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:57.425718069 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:57.425750017 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:57.425755978 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:57.428776026 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:57.428797007 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:57.428844929 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:57.428864956 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:57.428894043 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:57.431258917 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:57.431294918 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:57.431452990 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:57.431471109 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:57.431492090 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:57.431943893 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:57.431962013 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:57.434978962 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:57.435014009 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:57.435153961 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:57.435350895 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:57.435364962 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:57.445993900 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:57.446023941 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:57.446085930 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:57.446105957 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:57.446119070 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:57.446142912 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:57.446167946 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:57.446357012 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:57.446369886 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:57.446378946 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:57.446383953 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:57.449322939 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:57.449348927 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:57.449403048 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:57.450018883 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:57.450037956 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:58.064728975 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:58.073129892 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:58.073153019 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:58.074022055 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:58.074029922 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:58.082134962 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:58.082885027 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:58.082904100 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:58.083899975 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:58.083906889 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:58.083925962 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:58.089335918 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:58.089986086 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:58.089998960 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:58.090867043 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:58.090873957 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:58.113008976 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:58.113861084 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:58.113883018 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:58.115142107 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:58.115147114 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:58.119797945 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:58.119827986 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:58.120661974 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:58.120668888 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:58.183712006 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:58.183748960 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:58.183865070 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:58.183871984 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:58.184364080 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:58.185499907 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:58.185558081 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:58.185631037 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:58.189899921 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:58.190237999 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:58.190521955 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:58.211745977 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:58.211767912 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:58.211805105 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:58.211826086 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:58.214992046 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:58.215013981 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:58.215060949 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:58.215068102 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:58.215611935 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:58.216624022 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:58.216749907 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:58.216943026 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:58.216949940 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:58.218332052 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:58.218415976 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:58.218501091 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:58.224942923 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:58.224942923 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:58.224962950 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:58.224972963 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:58.226701021 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:58.226710081 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:58.226722002 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:58.226726055 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:58.244757891 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:58.244803905 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:58.244960070 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:58.246746063 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:58.246758938 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:58.247549057 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:58.249262094 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:58.249293089 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:58.249356985 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:58.250389099 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:58.250432968 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:58.250490904 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:58.250719070 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:58.250744104 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:58.250900030 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:58.250914097 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:58.252291918 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:58.252319098 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:58.252460003 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:58.252712011 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:58.252727985 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:58.252912045 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:58.252922058 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:58.253073931 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:58.253098011 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:58.902116060 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:58.902349949 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:58.902863026 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:58.902880907 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:58.902895927 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:58.902910948 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:58.903531075 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:58.903546095 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:58.903665066 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:58.903671026 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:59.252371073 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:59.252396107 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:59.252545118 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:59.253017902 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:59.253043890 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:59.253134012 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:59.253144026 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:59.253535986 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:59.253567934 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:59.253734112 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:59.253741026 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:59.254185915 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:59.254192114 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:59.254353046 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:59.254368067 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:59.343123913 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:59.343297005 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:59.343348026 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:59.343545914 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:59.343545914 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:59.343569040 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:59.343583107 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:59.344325066 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:59.344466925 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:59.344523907 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:59.344613075 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:59.344613075 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:59.344660997 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:59.344690084 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:59.348134041 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:59.348177910 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:59.348256111 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:59.348279953 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:59.348287106 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:59.348341942 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:59.348474979 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:59.348490953 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:59.348576069 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:59.348591089 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:59.355079889 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:59.355251074 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:59.355323076 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:59.355357885 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:59.355357885 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:59.355374098 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:59.355391026 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:59.356200933 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:59.356475115 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:59.356548071 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:59.356600046 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:59.356616974 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:59.356640100 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:59.356653929 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:59.358277082 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:59.358341932 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:59.358381987 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:59.358695030 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:59.358705044 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:59.358717918 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:59.358721972 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:59.359488010 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:59.359508991 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:59.359518051 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:59.359565020 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:59.359579086 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:59.359625101 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:59.359778881 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:59.359795094 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:59.359841108 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:59.359878063 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:59.361877918 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:59.361896992 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:59.361964941 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:59.362103939 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:59.362128973 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:59.999087095 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 13, 2024 18:07:59.999792099 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:07:59.999829054 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.000566006 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.000572920 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.007778883 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.008461952 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.008544922 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.009033918 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.009053946 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.013950109 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.015927076 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.015954971 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.016314983 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.016326904 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.022218943 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.022708893 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.022772074 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.023127079 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.023143053 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.028794050 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.029253006 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.029272079 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.029803038 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.029808998 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.101350069 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.101398945 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.101463079 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.101526022 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.101763964 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.101785898 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.101799011 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.101805925 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.105199099 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.105246067 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.105325937 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.105499983 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.105520010 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.109080076 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.109240055 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.109287024 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.109311104 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.109363079 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.109407902 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.109442949 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.109471083 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.109487057 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.111921072 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.112010956 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.112109900 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.112235069 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.112267971 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.115375996 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.115456104 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.115581036 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.115621090 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.115638018 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.115761042 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.115768909 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.118051052 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.118113041 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.118283987 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.118480921 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.118520021 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.125669003 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.125947952 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.126012087 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.126049042 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.126049042 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.126068115 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.126090050 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.128487110 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.128514051 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.128591061 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.128691912 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.128719091 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.132123947 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.132462978 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.132647991 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.132702112 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.132703066 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.132715940 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.132723093 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.135062933 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.135170937 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.135256052 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.135438919 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.135483980 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.797596931 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.798331976 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.798366070 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.799045086 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.799052000 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.800311089 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.800946951 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.800957918 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.801846027 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.801851988 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.803004026 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.803423882 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.803459883 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.803822041 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.803828955 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.804148912 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.804676056 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.804697990 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.805206060 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.805216074 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.818608999 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.819411993 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.819439888 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.820056915 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.820065975 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.899848938 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.899883986 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.899926901 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.899955988 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.900015116 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.900388002 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.900408983 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.900432110 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.900440931 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.902798891 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.902947903 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.903286934 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.903511047 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.903511047 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.903526068 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.903534889 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.903983116 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.904026031 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.904181004 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.904395103 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.904413939 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.905883074 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.905911922 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.906148911 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.906148911 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.906187057 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.908479929 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.908646107 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.908749104 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.908776999 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.908790112 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.908802032 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.908808947 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.910887957 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.910903931 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.911079884 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.911241055 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.911257029 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.914274931 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.914505959 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.914571047 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.914607048 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.914625883 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.914648056 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.914654970 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.916703939 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.916786909 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.916865110 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.916975021 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.916996956 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.925534964 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.925677061 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.925735950 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.925765991 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.925781965 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.925792933 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.925800085 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.927944899 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.927989960 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:00.928124905 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.928219080 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:00.928240061 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:01.939619064 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:01.940511942 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:01.940522909 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:01.940723896 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:01.941092968 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:01.941104889 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:01.941314936 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:01.941323996 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:01.941540956 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:01.941545963 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:01.941551924 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:01.941652060 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:01.942512989 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:01.942521095 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:01.942763090 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:01.942869902 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:01.942898035 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:01.943021059 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:01.943028927 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:01.943304062 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:01.943310976 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:01.943317890 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:01.943337917 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:01.943793058 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:01.943799973 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.042216063 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.042289019 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.042359114 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.042382956 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.042402983 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.042459011 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.042748928 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.042764902 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.042778015 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.042784929 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.044081926 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.044157982 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.044210911 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.044270992 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.044290066 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.044326067 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.044390917 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.044395924 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.044461966 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.044465065 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.044516087 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.044527054 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.044558048 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.044578075 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.044605970 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.044610977 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.044641972 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.044641972 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.044650078 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.045011997 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.045022011 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.045033932 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.045037985 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.045701981 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.045717001 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.045732021 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.045737982 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.046632051 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.046636105 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.046646118 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.046648979 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.050024986 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.050059080 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.050082922 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.050091028 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.050142050 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.050184965 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.053066969 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.053086042 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.053215027 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.053591013 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.053626060 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.053687096 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.054969072 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.055003881 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.055088043 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.055610895 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.055627108 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.055780888 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.055795908 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.056088924 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.056102037 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.064445972 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.064460039 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.064817905 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.064836979 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.702280045 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.702917099 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.702936888 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.703596115 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.703603029 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.710939884 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.711579084 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.711730003 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.711750984 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.712291956 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.712300062 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.712395906 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.712399960 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.712905884 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.712909937 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.719654083 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.720139027 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.720189095 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.720679045 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.720694065 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.730118036 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.730986118 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.731014013 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.731586933 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.731611967 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.774260044 CEST	443	49817	216.58.206.68	192.168.2.4
Oct 13, 2024 18:08:02.774337053 CEST	443	49817	216.58.206.68	192.168.2.4
Oct 13, 2024 18:08:02.774425030 CEST	49817	443	192.168.2.4	216.58.206.68
Oct 13, 2024 18:08:02.804474115 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.804737091 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.804811001 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.804932117 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.804960012 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.804975986 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.804984093 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.809112072 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.809150934 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.809242010 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.809513092 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.809541941 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.811177015 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.811311007 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.811400890 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.811436892 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.811453104 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.811465979 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.811471939 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.812933922 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.813121080 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.813515902 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.813515902 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.813601017 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.813606024 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.815073967 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.815114021 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.815212965 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.815361023 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.815380096 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.817100048 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.817145109 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.817218065 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.817373991 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.817401886 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.821525097 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.821599960 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.821683884 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.821866989 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.821882963 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.821894884 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.821899891 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.825805902 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.825846910 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.826041937 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.826225996 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.826245070 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.830816984 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.830915928 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.830972910 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.830997944 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.831053972 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.831213951 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.831223011 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.831233025 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.831237078 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.834198952 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.834228992 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:02.834305048 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.834534883 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:02.834551096 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:03.799910069 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:03.800139904 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:03.800231934 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:03.800610065 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:03.800874949 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:03.800908089 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:03.801028013 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:03.801038980 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:03.801879883 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:03.801883936 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:03.801897049 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:03.801935911 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:03.802007914 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:03.802231073 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:03.802237988 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:03.802340984 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:03.802346945 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:03.802824020 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:03.802848101 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:03.803287983 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:03.803294897 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:03.803416967 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:03.803421021 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:03.803788900 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:03.803793907 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:03.901169062 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:03.901307106 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:03.901437044 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:03.901592016 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:03.901609898 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:03.901619911 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:03.901626110 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:03.903044939 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:03.903052092 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:03.903131962 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:03.903137922 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:03.903189898 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:03.903225899 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:03.903400898 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:03.903417110 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:03.903573036 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:03.903583050 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:03.903594017 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:03.903599024 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:03.903768063 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:03.903791904 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:03.903839111 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:03.903846979 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:03.903922081 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:03.905313969 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:03.905316114 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:03.905329943 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:03.905863047 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:03.905869961 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:03.905909061 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:03.905977964 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:03.906275988 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:03.906280041 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:03.907979012 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:03.908001900 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:03.908092022 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:03.908869028 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:03.908894062 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:03.908998013 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:03.909447908 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:03.909460068 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:03.909657955 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:03.909672976 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:03.910023928 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:03.910062075 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:03.910115004 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:03.910310984 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:03.910321951 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:03.910887957 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:03.910896063 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:03.911113977 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:03.911247969 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:03.911257982 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:03.911798954 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:03.911817074 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:03.911859989 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:03.911998987 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:03.912012100 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:03.914103985 CEST	49817	443	192.168.2.4	216.58.206.68
Oct 13, 2024 18:08:03.914113998 CEST	443	49817	216.58.206.68	192.168.2.4
Oct 13, 2024 18:08:04.573259115 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:04.573951960 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:04.573990107 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:04.574467897 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:04.574480057 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:04.574836969 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:04.575185061 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:04.575239897 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:04.575263977 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:04.575562954 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:04.575597048 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:04.575972080 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:04.575979948 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:04.576112032 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:04.576117039 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:04.588181973 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:04.588752985 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:04.588798046 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:04.589415073 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:04.589425087 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:04.590053082 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:04.590703011 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:04.590728045 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:04.591186047 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:04.591192007 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:04.676006079 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:04.676199913 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:04.676284075 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:04.676618099 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:04.676636934 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:04.676980019 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:04.677316904 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:04.677392960 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:04.677417994 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:04.677442074 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:04.677499056 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:04.677568913 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:04.677580118 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:04.677591085 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:04.677594900 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:04.677922964 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:04.677952051 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:04.677994013 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:04.678018093 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:04.678067923 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:04.679050922 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:04.679050922 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:04.679080009 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:04.679094076 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:04.681343079 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:04.681390047 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:04.681483984 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:04.681688070 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:04.681740046 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:04.681849003 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:04.681873083 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:04.681885004 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:04.681999922 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:04.682017088 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:04.682816029 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:04.682826996 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:04.682902098 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:04.683134079 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:04.683144093 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:04.694454908 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:04.694650888 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:04.694767952 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:04.694827080 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:04.694845915 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:04.694861889 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:04.694868088 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:04.695689917 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:04.695760012 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:04.695831060 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:04.695939064 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:04.695950031 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:04.695967913 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:04.695972919 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:04.697971106 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:04.698018074 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:04.698101997 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:04.698276043 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:04.698293924 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:04.698715925 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:04.698744059 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:04.698999882 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:04.699179888 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:04.699189901 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:05.266849995 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:05.267582893 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:05.267606974 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:05.268274069 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:05.268279076 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:05.340181112 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:05.340836048 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:05.340879917 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:05.341466904 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:05.341471910 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:05.351377010 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:05.351855040 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:05.351872921 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:05.352418900 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:05.352426052 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:05.369328022 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:05.369395971 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:05.369461060 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:05.369491100 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:05.369524956 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:05.369745016 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:05.369792938 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:05.369824886 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:05.369824886 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:05.369843960 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:05.369862080 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:05.370784044 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:05.371201992 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:05.371225119 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:05.371690989 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:05.371695995 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:05.372872114 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:05.372920036 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:05.373178005 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:05.373317957 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:05.373331070 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:05.390409946 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:05.390804052 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:05.390816927 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:05.391351938 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:05.391357899 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:05.445072889 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:05.445147991 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:05.445225954 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:05.445255995 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:05.445278883 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:05.445405006 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:05.449379921 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:05.449397087 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:05.449415922 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:05.449421883 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:05.453043938 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:05.453084946 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:05.453178883 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:05.453272104 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:05.453345060 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:05.453356028 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:05.453385115 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:05.453454971 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:05.453567982 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:05.453581095 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:05.453592062 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:05.453598022 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:05.456106901 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:05.456149101 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:05.456207991 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:05.456315994 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:05.456331015 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:05.477636099 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:05.477704048 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:05.477783918 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:05.478034019 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:05.478060007 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:05.478075027 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:05.478082895 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:05.480755091 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:05.480784893 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:05.480855942 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:05.480992079 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:05.481008053 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:05.496503115 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:05.496567965 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:05.496697903 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:05.496731043 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:05.496740103 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:05.496751070 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:05.496756077 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:05.499114990 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:05.499145985 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:05.499394894 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:05.499511003 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:05.499531031 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.054686069 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.055335999 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.055371046 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.055918932 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.055931091 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.112343073 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.113001108 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.113024950 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.113616943 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.113622904 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.114912987 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.115511894 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.115545988 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.116249084 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.116254091 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.136739016 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.137195110 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.137223005 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.137756109 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.137762070 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.159735918 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.159811020 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.159878969 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.159912109 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.159949064 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.160007000 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.160164118 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.160181046 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.160200119 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.160207033 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.163590908 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.163625956 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.163691998 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.163839102 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.163853884 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.214096069 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.214252949 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.214328051 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.214520931 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.214544058 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.214557886 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.214569092 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.217103004 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.217289925 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.217348099 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.217401981 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.217576027 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.217592955 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.217700005 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.217705965 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.218348026 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.218378067 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.218486071 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.218691111 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.218704939 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.220276117 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.220345974 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.220433950 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.220607042 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.220643997 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.238346100 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.238423109 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.238506079 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.238607883 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.238620996 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.238631010 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.238636017 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.241533041 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.241564989 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.241796970 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.241796970 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.241830111 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.292758942 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.293397903 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.293405056 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.294053078 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.294058084 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.396966934 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.397047997 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.397129059 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.397458076 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.397469997 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.397497892 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.397514105 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.401349068 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.401380062 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.403419971 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.403420925 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.403449059 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.813237906 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.814332962 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.814332962 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.814354897 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.814363003 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.878376007 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.879513025 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.879543066 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.879689932 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.879697084 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.889945984 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.890760899 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.890760899 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.890774012 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.890786886 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.899617910 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.900392056 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.900392056 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.900419950 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.900438070 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.914103031 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.914166927 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.914418936 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.914418936 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.914448023 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.914475918 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.917376041 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.917409897 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.917593002 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.917714119 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.917721033 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.982793093 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.982860088 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.982916117 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.983189106 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.983189106 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.983189106 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.986358881 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.986402988 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.986654997 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.986654997 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.986694098 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.991182089 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.991210938 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.991257906 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.991400957 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.991400957 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.991523027 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.991533995 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.993515015 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.993556023 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:06.993787050 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.993787050 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:06.993819952 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.004538059 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.004751921 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.004862070 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:07.004862070 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:07.004914045 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:07.004934072 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.006850958 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:07.006860018 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.007050037 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:07.007050037 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:07.007069111 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.082305908 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.083343983 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:07.083343983 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:07.083362103 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.083374977 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.187403917 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.187542915 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.187788010 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:07.187788010 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:07.188262939 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:07.188283920 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.191333055 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:07.191404104 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.191555977 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:07.191647053 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:07.191664934 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.284935951 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:07.284967899 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.578152895 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.578958988 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:07.578979015 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.579668999 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:07.579675913 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.639760971 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.640785933 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:07.640818119 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.641001940 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:07.641009092 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.659845114 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.660404921 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:07.660434008 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.661031008 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:07.661084890 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.680258036 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.680576086 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.680655956 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:07.680732965 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:07.680752039 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.680774927 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:07.680780888 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.681771040 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.682415009 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:07.682476997 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.682933092 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:07.682948112 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.684132099 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:07.684226990 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.684324980 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:07.684516907 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:07.684550047 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.741925001 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.742000103 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.742180109 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:07.742418051 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:07.742446899 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.742458105 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:07.742465019 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.745157003 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:07.745223045 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.745393038 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:07.745527983 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:07.745551109 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.759937048 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.760181904 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.760287046 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:07.760389090 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:07.760389090 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:07.760432959 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.760467052 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.763077021 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:07.763164997 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.763252974 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:07.763458014 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:07.763493061 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.788171053 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.788657904 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.788707018 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.788784027 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:07.788820982 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:07.788820982 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:07.788842916 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.788863897 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.791605949 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:07.791644096 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.791719913 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:07.791935921 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:07.791949034 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.888252020 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.888916016 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:07.888940096 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.889453888 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:07.889457941 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.997665882 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.997741938 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.997821093 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:07.997833967 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.997864008 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:07.997920036 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:07.998270988 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:07.998279095 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:08.002064943 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:08.002090931 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:08.002387047 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:08.002490044 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:08.002499104 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:08.342092037 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:08.352382898 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:08.352412939 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:08.360604048 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:08.360611916 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:08.423830986 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:08.424426079 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:08.446039915 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:08.446075916 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:08.446706057 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:08.446712971 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:08.447510958 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:08.447518110 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:08.448904037 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:08.448910952 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:08.791838884 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:08.792023897 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:08.792085886 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:08.793672085 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:08.810642004 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:08.810656071 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:08.811661959 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:08.811669111 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:08.812164068 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:08.812181950 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:08.812195063 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:08.812201977 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:08.833080053 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:08.833147049 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:08.833231926 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:08.852612972 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:08.852634907 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:08.886663914 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:08.887236118 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:08.887460947 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:08.889429092 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:08.889498949 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:08.889555931 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:08.909301996 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:08.909316063 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:08.914434910 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:08.914542913 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:08.914834976 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:08.915051937 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:08.915059090 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:08.915069103 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:08.915074110 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:08.918256044 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:08.918267965 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:08.918281078 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:08.918286085 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:08.926321983 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:08.926378965 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:08.926506042 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:08.926848888 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:08.926873922 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:08.927622080 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:08.927650928 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:08.927737951 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:08.927844048 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:08.927854061 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:08.928019047 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:08.928039074 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:08.928133011 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:08.928430080 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:08.928441048 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:08.983872890 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:08.984600067 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:08.984616995 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:08.984986067 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:08.984991074 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:09.083673000 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:09.083836079 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:09.084003925 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:09.084060907 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:09.084060907 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:09.084080935 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:09.084090948 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:09.087857962 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:09.087922096 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:09.087997913 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:09.088169098 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:09.088188887 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:09.514971018 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:09.517143011 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:09.517160892 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:09.518022060 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:09.518027067 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:09.576833010 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:09.579112053 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:09.612598896 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:09.618582010 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:09.618674994 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:09.618750095 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:09.623209953 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:09.623229980 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:09.624349117 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:09.624357939 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:09.627408981 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:09.627423048 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:09.627928019 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:09.627934933 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:09.653393984 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:09.653417110 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:09.654126883 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:09.654131889 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:09.654642105 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:09.654642105 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:09.654695988 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:09.654717922 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:09.658334017 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:09.658377886 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:09.658530951 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:09.658844948 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:09.658860922 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:09.721643925 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:09.722012043 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:09.722060919 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:09.722099066 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:09.722214937 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:09.725624084 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:09.725739002 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:09.725799084 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:09.727066040 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:09.727085114 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:09.729296923 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:09.729341984 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:09.729383945 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:09.729401112 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:09.740268946 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:09.752830029 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:09.753019094 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:09.753129005 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:09.785515070 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:09.793812990 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:09.793837070 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:09.794836998 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:09.794847965 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:09.795629978 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:09.795646906 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:09.799650908 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:09.799685001 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:09.799916029 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:09.800086975 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:09.800103903 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:09.804032087 CEST	49920	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:09.804100990 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:09.804507017 CEST	49920	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:09.804996967 CEST	49921	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:09.805023909 CEST	443	49921	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:09.805079937 CEST	49921	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:09.805479050 CEST	49921	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:09.805495977 CEST	443	49921	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:09.805835962 CEST	49920	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:09.805856943 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:09.892554045 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:09.892751932 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:09.892858982 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:09.917130947 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:09.917184114 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:09.917212009 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:09.917244911 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:09.932352066 CEST	49922	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:09.932396889 CEST	443	49922	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:09.932701111 CEST	49922	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:09.933168888 CEST	49922	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:09.933181047 CEST	443	49922	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:10.348568916 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:10.349118948 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:10.349144936 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:10.349697113 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:10.349701881 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:10.454938889 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:10.455091000 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:10.455229044 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:10.455634117 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:10.455646038 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:10.455667019 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:10.455672026 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:10.457829952 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:10.459382057 CEST	49920	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:10.459400892 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:10.460433006 CEST	49920	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:10.460438013 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:10.463758945 CEST	49923	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:10.463778973 CEST	443	49923	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:10.463840961 CEST	49923	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:10.464109898 CEST	49923	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:10.464118004 CEST	443	49923	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:10.481084108 CEST	443	49921	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:10.481555939 CEST	49921	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:10.481575966 CEST	443	49921	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:10.481967926 CEST	49921	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:10.481981039 CEST	443	49921	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:10.488631964 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:10.489021063 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:10.489032984 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:10.489634991 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:10.489639044 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:10.557085037 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:10.557372093 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:10.557435036 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:10.557435989 CEST	49920	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:10.557504892 CEST	49920	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:10.557552099 CEST	49920	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:10.557591915 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:10.562103987 CEST	49924	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:10.562144041 CEST	443	49924	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:10.562273026 CEST	49924	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:10.562635899 CEST	49924	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:10.562652111 CEST	443	49924	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:10.586004019 CEST	443	49921	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:10.586077929 CEST	443	49921	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:10.586183071 CEST	443	49921	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:10.586244106 CEST	49921	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:10.586293936 CEST	49921	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:10.586308956 CEST	443	49921	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:10.590562105 CEST	49925	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:10.590590954 CEST	443	49925	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:10.590689898 CEST	49925	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:10.590871096 CEST	49925	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:10.590884924 CEST	443	49925	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:10.595393896 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:10.595421076 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:10.595494032 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:10.595499992 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:10.595520973 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:10.595582962 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:10.595884085 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:10.595890999 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:10.595942974 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:10.595947027 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:10.599581003 CEST	49926	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:10.599590063 CEST	443	49926	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:10.599922895 CEST	49926	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:10.600440025 CEST	49926	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:10.600451946 CEST	443	49926	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:10.611094952 CEST	443	49922	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:10.611783028 CEST	49922	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:10.611799002 CEST	443	49922	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:10.612584114 CEST	49922	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:10.612596035 CEST	443	49922	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:10.712536097 CEST	443	49922	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:10.712634087 CEST	443	49922	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:10.712687016 CEST	49922	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:10.712883949 CEST	49922	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:10.712883949 CEST	49922	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:10.712896109 CEST	443	49922	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:10.712903976 CEST	443	49922	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:10.717365026 CEST	49927	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:10.717400074 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:10.717467070 CEST	49927	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:10.717639923 CEST	49927	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:10.717658043 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:11.150659084 CEST	443	49923	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:11.151237965 CEST	49923	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:11.151274920 CEST	443	49923	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:11.151940107 CEST	49923	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:11.151947021 CEST	443	49923	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:11.238502026 CEST	443	49924	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:11.239056110 CEST	49924	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:11.239090919 CEST	443	49924	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:11.239480972 CEST	49924	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:11.239487886 CEST	443	49924	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:11.254497051 CEST	443	49923	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:11.254919052 CEST	443	49923	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:11.254998922 CEST	49923	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:11.255033016 CEST	443	49923	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:11.255145073 CEST	443	49923	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:11.255168915 CEST	49923	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:11.255168915 CEST	49923	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:11.255220890 CEST	443	49923	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:11.255270958 CEST	49923	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:11.255289078 CEST	443	49923	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:11.258045912 CEST	49928	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:11.258125067 CEST	443	49928	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:11.258217096 CEST	49928	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:11.258452892 CEST	49928	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:11.258490086 CEST	443	49928	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:11.269299030 CEST	443	49926	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:11.269762993 CEST	49926	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:11.269803047 CEST	443	49926	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:11.270421028 CEST	49926	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:11.270426989 CEST	443	49926	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:11.279181004 CEST	443	49925	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:11.279599905 CEST	49925	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:11.279608011 CEST	443	49925	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:11.279957056 CEST	49925	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:11.279961109 CEST	443	49925	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:11.343405008 CEST	443	49924	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:11.343950033 CEST	443	49924	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:11.344010115 CEST	49924	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:11.344058990 CEST	49924	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:11.344059944 CEST	49924	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:11.344083071 CEST	443	49924	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:11.344096899 CEST	443	49924	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:11.347049952 CEST	49929	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:11.347089052 CEST	443	49929	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:11.347146988 CEST	49929	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:11.347261906 CEST	49929	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:11.347275019 CEST	443	49929	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:11.371578932 CEST	443	49926	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:11.371612072 CEST	443	49926	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:11.371653080 CEST	443	49926	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:11.371712923 CEST	49926	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:11.371853113 CEST	49926	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:11.371853113 CEST	49926	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:11.371865988 CEST	443	49926	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:11.371872902 CEST	443	49926	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:11.374188900 CEST	49930	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:11.374198914 CEST	443	49930	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:11.374255896 CEST	49930	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:11.374352932 CEST	49930	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:11.374361992 CEST	443	49930	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:11.381006002 CEST	443	49925	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:11.381058931 CEST	443	49925	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:11.381185055 CEST	443	49925	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:11.381278992 CEST	49925	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:11.381278992 CEST	49925	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:11.381278992 CEST	49925	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:11.381361961 CEST	49925	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:11.381366014 CEST	443	49925	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:11.383244991 CEST	49931	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:11.383270025 CEST	443	49931	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:11.383323908 CEST	49931	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:11.383455038 CEST	49931	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:11.383470058 CEST	443	49931	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:11.398957968 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:11.399313927 CEST	49927	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:11.399342060 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:11.399744034 CEST	49927	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:11.399749994 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:11.516654968 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:11.516730070 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:11.516782045 CEST	49927	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:11.516801119 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:11.516839981 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:11.516891956 CEST	49927	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:11.517142057 CEST	49927	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:11.517153978 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:11.517174006 CEST	49927	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:11.517179012 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:11.520093918 CEST	49932	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:11.520190954 CEST	443	49932	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:11.520279884 CEST	49932	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:11.520498037 CEST	49932	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:11.520535946 CEST	443	49932	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:11.904959917 CEST	443	49928	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:11.906023979 CEST	49928	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:11.906023979 CEST	49928	443	192.168.2.4	13.107.246.45
Oct 13, 2024 18:08:11.906080961 CEST	443	49928	13.107.246.45	192.168.2.4
Oct 13, 2024 18:08:11.906122923 CEST	443	49928	13.107.246.45	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 13, 2024 18:06:49.048216105 CEST	53	65479	1.1.1.1	192.168.2.4
Oct 13, 2024 18:06:49.072892904 CEST	53	55776	1.1.1.1	192.168.2.4
Oct 13, 2024 18:06:50.175859928 CEST	53	65241	1.1.1.1	192.168.2.4
Oct 13, 2024 18:06:50.620541096 CEST	57574	53	192.168.2.4	1.1.1.1
Oct 13, 2024 18:06:50.622872114 CEST	59954	53	192.168.2.4	1.1.1.1
Oct 13, 2024 18:06:51.642708063 CEST	54883	53	192.168.2.4	1.1.1.1
Oct 13, 2024 18:06:51.642915964 CEST	53026	53	192.168.2.4	1.1.1.1
Oct 13, 2024 18:06:51.892137051 CEST	53	59954	1.1.1.1	192.168.2.4
Oct 13, 2024 18:06:51.944430113 CEST	53	57574	1.1.1.1	192.168.2.4
Oct 13, 2024 18:06:52.183243990 CEST	64437	53	192.168.2.4	1.1.1.1
Oct 13, 2024 18:06:52.189331055 CEST	61985	53	192.168.2.4	1.1.1.1
Oct 13, 2024 18:06:52.190285921 CEST	53	64437	1.1.1.1	192.168.2.4
Oct 13, 2024 18:06:52.196566105 CEST	53	61985	1.1.1.1	192.168.2.4
Oct 13, 2024 18:06:52.216939926 CEST	53	54883	1.1.1.1	192.168.2.4
Oct 13, 2024 18:06:52.363120079 CEST	53	53026	1.1.1.1	192.168.2.4
Oct 13, 2024 18:06:56.456171036 CEST	61199	53	192.168.2.4	1.1.1.1
Oct 13, 2024 18:06:56.456304073 CEST	57535	53	192.168.2.4	1.1.1.1
Oct 13, 2024 18:06:56.968194008 CEST	53	61199	1.1.1.1	192.168.2.4
Oct 13, 2024 18:06:57.293592930 CEST	53	57535	1.1.1.1	192.168.2.4
Oct 13, 2024 18:06:57.683166027 CEST	53	59973	1.1.1.1	192.168.2.4
Oct 13, 2024 18:07:07.010067940 CEST	138	138	192.168.2.4	192.168.2.255
Oct 13, 2024 18:07:07.236457109 CEST	53	65094	1.1.1.1	192.168.2.4
Oct 13, 2024 18:07:08.042429924 CEST	62276	53	192.168.2.4	1.1.1.1
Oct 13, 2024 18:07:08.042834997 CEST	53552	53	192.168.2.4	1.1.1.1
Oct 13, 2024 18:07:08.050221920 CEST	53	53552	1.1.1.1	192.168.2.4
Oct 13, 2024 18:07:08.050626993 CEST	53	62276	1.1.1.1	192.168.2.4
Oct 13, 2024 18:07:27.456641912 CEST	53	55745	1.1.1.1	192.168.2.4
Oct 13, 2024 18:07:47.539041042 CEST	53	61118	1.1.1.1	192.168.2.4
Oct 13, 2024 18:07:51.211482048 CEST	53	60514	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 13, 2024 18:06:52.217148066 CEST	192.168.2.4	1.1.1.1	c21e	(Port unreachable)	Destination Unreachable
Oct 13, 2024 18:06:57.293958902 CEST	192.168.2.4	1.1.1.1	c20e	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 13, 2024 18:06:50.620541096 CEST	192.168.2.4	1.1.1.1	0x522c	Standard query (0)	account-update-amazon-gift-card-collection.9d6ihdz43.top	A (IP address)	IN (0x0001)	false
Oct 13, 2024 18:06:50.622872114 CEST	192.168.2.4	1.1.1.1	0x26c9	Standard query (0)	account-update-amazon-gift-card-collection.9d6ihdz43.top	65	IN (0x0001)	false
Oct 13, 2024 18:06:51.642708063 CEST	192.168.2.4	1.1.1.1	0x2dcb	Standard query (0)	account-update-amazon-gift-card-collection.9d6ihdz43.top	A (IP address)	IN (0x0001)	false
Oct 13, 2024 18:06:51.642915964 CEST	192.168.2.4	1.1.1.1	0xfb07	Standard query (0)	account-update-amazon-gift-card-collection.9d6ihdz43.top	65	IN (0x0001)	false
Oct 13, 2024 18:06:52.183243990 CEST	192.168.2.4	1.1.1.1	0xbe26	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 13, 2024 18:06:52.189331055 CEST	192.168.2.4	1.1.1.1	0x8eb9	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 13, 2024 18:06:56.456171036 CEST	192.168.2.4	1.1.1.1	0xdff5	Standard query (0)	account-update-amazon-gift-card-collection.9d6ihdz43.top	A (IP address)	IN (0x0001)	false
Oct 13, 2024 18:06:56.456304073 CEST	192.168.2.4	1.1.1.1	0x5b93	Standard query (0)	account-update-amazon-gift-card-collection.9d6ihdz43.top	65	IN (0x0001)	false
Oct 13, 2024 18:07:08.042429924 CEST	192.168.2.4	1.1.1.1	0xfa62	Standard query (0)	www.amazon.com	A (IP address)	IN (0x0001)	false
Oct 13, 2024 18:07:08.042834997 CEST	192.168.2.4	1.1.1.1	0x208a	Standard query (0)	www.amazon.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 13, 2024 18:06:51.892137051 CEST	1.1.1.1	192.168.2.4	0x26c9	Server failure (2)	account-update-amazon-gift-card-collection.9d6ihdz43.top	none	none	65	IN (0x0001)	false
Oct 13, 2024 18:06:51.944430113 CEST	1.1.1.1	192.168.2.4	0x522c	No error (0)	account-update-amazon-gift-card-collection.9d6ihdz43.top		47.76.171.224	A (IP address)	IN (0x0001)	false
Oct 13, 2024 18:06:52.190285921 CEST	1.1.1.1	192.168.2.4	0xbe26	No error (0)	www.google.com		216.58.206.68	A (IP address)	IN (0x0001)	false
Oct 13, 2024 18:06:52.196566105 CEST	1.1.1.1	192.168.2.4	0x8eb9	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 13, 2024 18:06:52.216939926 CEST	1.1.1.1	192.168.2.4	0x2dcb	No error (0)	account-update-amazon-gift-card-collection.9d6ihdz43.top		47.76.171.224	A (IP address)	IN (0x0001)	false
Oct 13, 2024 18:06:52.363120079 CEST	1.1.1.1	192.168.2.4	0xfb07	Server failure (2)	account-update-amazon-gift-card-collection.9d6ihdz43.top	none	none	65	IN (0x0001)	false
Oct 13, 2024 18:06:56.968194008 CEST	1.1.1.1	192.168.2.4	0xdff5	No error (0)	account-update-amazon-gift-card-collection.9d6ihdz43.top		47.76.171.224	A (IP address)	IN (0x0001)	false
Oct 13, 2024 18:06:57.293592930 CEST	1.1.1.1	192.168.2.4	0x5b93	Server failure (2)	account-update-amazon-gift-card-collection.9d6ihdz43.top	none	none	65	IN (0x0001)	false
Oct 13, 2024 18:07:04.248132944 CEST	1.1.1.1	192.168.2.4	0x3a30	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 13, 2024 18:07:04.248132944 CEST	1.1.1.1	192.168.2.4	0x3a30	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 13, 2024 18:07:06.635947943 CEST	1.1.1.1	192.168.2.4	0x789	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 18:07:06.635947943 CEST	1.1.1.1	192.168.2.4	0x789	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 13, 2024 18:07:08.050221920 CEST	1.1.1.1	192.168.2.4	0x208a	No error (0)	www.amazon.com	tp.47cf2c8c9-frontier.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 18:07:08.050221920 CEST	1.1.1.1	192.168.2.4	0x208a	No error (0)	tp.47cf2c8c9-frontier.amazon.com	d3ag4hukkh62yn.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 18:07:08.050626993 CEST	1.1.1.1	192.168.2.4	0xfa62	No error (0)	www.amazon.com	tp.47cf2c8c9-frontier.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 18:07:08.050626993 CEST	1.1.1.1	192.168.2.4	0xfa62	No error (0)	tp.47cf2c8c9-frontier.amazon.com	d3ag4hukkh62yn.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 18:07:08.050626993 CEST	1.1.1.1	192.168.2.4	0xfa62	No error (0)	d3ag4hukkh62yn.cloudfront.net		99.86.8.42	A (IP address)	IN (0x0001)	false
Oct 13, 2024 18:07:18.792469025 CEST	1.1.1.1	192.168.2.4	0x5506	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 18:07:18.792469025 CEST	1.1.1.1	192.168.2.4	0x5506	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 13, 2024 18:07:43.033714056 CEST	1.1.1.1	192.168.2.4	0xac7a	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 18:07:43.033714056 CEST	1.1.1.1	192.168.2.4	0xac7a	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 13, 2024 18:08:00.715962887 CEST	1.1.1.1	192.168.2.4	0x3cef	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 18:08:00.715962887 CEST	1.1.1.1	192.168.2.4	0x3cef	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

fs.microsoft.com

otelrules.azureedge.net

account-update-amazon-gift-card-collection.9d6ihdz43.top

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49737	47.76.171.224	80	2136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 18:06:52.012953997 CEST	471	OUT	GET / HTTP/1.1 Host: account-update-amazon-gift-card-collection.9d6ihdz43.top Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 18:06:52.939380884 CEST	590	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:06:52 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Sun, 13 Oct 2024 08:38:13 GMT ETag: "197-62457a41297c1-gzip" Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 284 Content-Type: text/html Data Raw: 1f 8b 08 00 00 00 00 00 00 03 5d 51 cb 4e c3 30 10 3c b7 5f 61 7c a6 09 41 95 0a 92 1d 09 f1 b8 c2 a1 1c 38 ba f6 b6 59 70 ec c8 bb a4 84 af c7 49 28 12 bd 78 35 eb d9 19 cf 5a 5d 3c 3c df 6f df 5e 1e 45 c3 ad af 97 6a 2c c2 9b 70 d0 12 82 ac 97 0b d5 80 71 b9 2e 54 0b 6c 84 6d 4c 22 60 2d 5f b7 4f ab 1b 29 ca e9 ca 63 f8 10 09 bc 96 68 63 90 a2 49 b0 d7 b2 dc 9b 7e c4 45 3e 4e cc 49 24 98 16 b4 ec 11 8e 5d 4c 2c 45 e6 30 84 2c 7a 44 c7 8d 76 90 c7 60 35 81 4b 81 01 19 8d 5f 91 35 1e 74 55 5c 9d a4 18 d9 43 7d d7 9a ef 18 54 39 a3 b1 4f 36 61 c7 82 87 2e 9b b4 d1 7d 7a c8 16 29 12 c5 84 07 0c 82 92 cd 8f 33 94 73 50 89 c1 c1 57 51 ed 6e af 61 b3 b1 c5 3b c9 5a 95 b3 c4 59 34 e2 c1 03 35 00 fc 17 f0 9f 06 54 d5 1a 2a b3 2e 2c d1 b4 b9 f2 77 75 6a 17 dd 30 89 39 ec 05 3a 2d 4d d7 8d 36 19 8e ed 91 3a 53 f2 c8 f4 0d 3f ba 23 70 d3 97 01 00 00 Data Ascii: ]QN0<_a\|A8YpI(x5Z]<<o^Ej,pq.TlmL"`-_O)chcI~E>NI$]L,E0,zDv`5K_5tU\C}T9O6a.}z)3sPWQna;ZY45T*.,wuj09:-M6:S?#p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49738	47.76.171.224	80	2136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 18:06:52.965301991 CEST	481	OUT	GET /assets/index.1b92e77c.js HTTP/1.1 Host: account-update-amazon-gift-card-collection.9d6ihdz43.top Connection: keep-alive Origin: http://account-update-amazon-gift-card-collection.9d6ihdz43.top User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://account-update-amazon-gift-card-collection.9d6ihdz43.top/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 18:06:53.292898893 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:06:53 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Fri, 11 Oct 2024 08:41:34 GMT ETag: "113213-6242f74542b80-gzip" Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Transfer-Encoding: chunked Content-Type: text/javascript Data Raw: 31 66 61 61 0d 0a 1f 8b 08 00 00 00 00 00 00 03 d4 bd 79 5f db c8 d2 28 fc ff fd 14 e0 97 cb 95 86 c6 b1 81 00 91 a3 f8 0d 5b 20 10 92 81 84 2c 1e 8e 47 c6 32 78 90 25 47 92 cd 66 7f f7 b7 96 de 24 9b cc 9c e7 de e7 77 cf 7b e6 04 4b ad de bb ba ba aa ba 96 71 90 2e b4 4f fd 8f 9d bf c2 ab bc da 0d 7b fd 38 fc 94 26 c3 30 cd 1f 1a 63 f8 b8 7f ea 3b a1 c8 45 ec fa 6f f2 85 7e bc 10 36 db a7 94 f2 14 c6 a3 41 98 06 9d 28 f4 16 6b e2 2a 89 7b fd eb 91 7e bf 4b fb b9 7a 1e 07 d1 28 f4 e2 a9 eb 85 ad fc d2 8f a9 e6 9f bb a6 66 67 9f ea 7c 18 86 49 6f 21 5f f4 2b d9 c3 a0 93 44 95 66 be 52 a9 78 98 07 fe df 70 7a a3 f8 2a ef 27 b1 e3 3e 41 73 59 be 90 fb dd e4 0a 7a 11 e7 d5 ab 34 0c f2 70 3f 0a f1 cd a9 44 fd f8 b6 e2 56 d3 30 3a e9 67 79 a3 df 73 f2 e5 e5 bc 9a 8d 86 c3 24 cd 33 fb d9 a9 0c 92 ee 28 0a 87 90 39 09 ba 15 d7 4d c3 7c 94 c6 8d 5e 92 3a dc 4e b2 00 fd d2 4d fd 1c 85 e9 c3 79 18 c1 94 25 e9 db 28 72 fe 17 b6 d6 82 e2 7e a9 aa cb ff 05 95 39 89 db 88 c3 bb 85 0f a3 3c c0 de 7f ec 64 61 3a 0e [TRUNCATED] Data Ascii: 1faay_([ ,G2x%Gf$w{Kq.O{8&0c;Eo~6A(k{~Kz(fg\|Io!_+DfRxpz'>AsYz4p?DV0:gys$3(9M\|^:NMy%(r~9<da:!dU+W7&cjfnT`@eNN+=Z^N{Q'.Y6i7ujb6xj?kXe~/HK0MtD+>Q_$q@,\BAUAz+u7S2af$~^J`gW)C+/jrp0l70&?~[Ev@{6$:WZA78h!pZ~gae0Sa>~{>>?o~>o~{qfIGQZ#lak!y+jcM!rC#u)w`)=-o m\Xz\Hsr@M&\qgyk?q*IeyWp,_0RnG@yRpW0;Ng5i'c7A.VS/6
Oct 13, 2024 18:06:53.292937994 CEST	224	IN	Data Raw: 4d 83 87 6a 3f a3 5f 91 8c b0 c3 a7 5d 58 10 84 d2 56 42 f5 2e 7c 08 86 97 15 71 76 33 f7 e3 79 98 c3 c7 df a3 b9 1f f7 60 a4 f0 b5 9b e3 57 89 55 01 37 54 d4 e2 57 44 bf fc 29 03 78 8a af a1 b9 a0 fc 81 31 b1 f8 48 25 c2 45 df 47 e8 00 fc 69 b2 Data Ascii: Mj?_]XVB.\|qv3y`WU7TWD)x1H%EGipw11L&]qz`W~sv!NM9mV3ZmZwaXB}48,j0HPCqrAmiI\|~HFBe
Oct 13, 2024 18:06:53.292973995 CEST	1236	IN	Data Raw: 12 bd 84 dd 62 0e 86 3f 95 c6 6f e5 2c f1 c0 ae 46 be 86 70 22 89 23 82 82 5f 6e 57 b3 17 71 73 4e 26 0e ed 51 f8 ea 02 b4 2e 9d fa 2f 56 9d 3f ee dc 17 d7 a2 9d f8 47 37 0e 6d 91 34 1c 46 01 cc e5 d2 a9 70 f8 24 8e 9b 31 ac c2 97 21 40 f0 6e 90 Data Ascii: b?o,Fp"#_nWqsN&Q./V?G7m4Fp$1!@nU`Pv%1fx**Ku8t$S]qyqf/5C+g/=N~0S;jQNA?M;/j1(\kjM#^YqCM$AD/\B2c?uCe#(;sQ-X
Oct 13, 2024 18:06:53.293011904 CEST	1236	IN	Data Raw: f7 36 f5 28 04 98 e2 f7 b0 d7 83 ed 95 21 7f 47 ef 57 51 18 c4 a3 a1 49 00 28 fc 14 00 a3 de 85 3a 39 05 68 1f e8 b7 7f 98 8a 45 40 e3 87 74 ae 60 3a f1 59 be 73 98 56 09 41 67 40 b2 e8 67 a8 ce 75 ab c3 51 76 43 79 5d 20 f8 a7 80 86 16 b8 37 8e Data Ascii: 6(!GWQI(:9hE@t`:YsVAg@guQvCy] 7"vCl!aYcT_CeV\}+Uu[ZeU(5fFszVq88g;P\|6b>u<L#~xx:O~&y5d8-:DJcGsN*%R
Oct 13, 2024 18:06:53.293066978 CEST	1236	IN	Data Raw: 19 36 a2 37 19 ed 50 99 d1 cc 03 75 43 a5 e6 72 a6 ac 1c 84 fe 19 a2 18 8e 8e 37 81 09 33 07 41 17 d8 e6 a7 e3 4d a6 58 52 c0 2f 98 b7 6e 7a d9 cb f4 dd 7c e8 63 3e a2 38 53 bc 54 f2 65 1b cd c5 9a 67 a1 5a 38 39 f5 b8 24 19 05 4c 31 2f 7d 38 43 Data Ascii: 67PuCr73AMXR/nz\|c>8STegZ89$L1/}8CX>9uL )eqIRHX5]bd?=T/uKeN7s)Tdg;fJeH$U4\=qFS1.yC!LhD:<HjZp,
Oct 13, 2024 18:06:53.293266058 CEST	1236	IN	Data Raw: 58 e0 b9 34 0b f7 3b f3 23 bb a7 62 e4 47 30 0e 22 2c 20 fd f0 14 5e 54 91 a1 3f aa 06 c3 61 84 58 39 d0 9d cc 9a 80 b7 87 ae 37 24 56 12 48 be 86 ac d0 c9 9a 5d 5f ab a3 23 e1 a1 ef 37 58 65 91 e6 99 0a 8b 31 ae 05 9c a5 52 a9 67 0d 4a ff 83 b2 Data Ascii: X4;#bG0", ^T?aX97$VH]_#7Xe1RgJC.*N:H_#rL,sD3-G:b$21IBa~`HDE@!@E@<XAW.QqVmVIut6-zb=N3ewT
Oct 13, 2024 18:06:53.293299913 CEST	1236	IN	Data Raw: ec 0a 6b 38 e3 96 0f e5 96 97 b8 2d 24 88 cf 4a d0 6e 49 5e bb a2 07 cc 5e aa f6 fe c8 e9 42 55 c0 94 20 16 b0 24 cc df 7b 8a b2 2f f7 8e 58 80 12 81 27 bb 16 f0 c9 87 e0 34 c2 b3 39 a3 bb 44 2d 62 63 5d fb 92 80 6f 79 39 12 23 ce 87 2a e0 68 0e Data Ascii: k8-$JnI^^BU ${/X'49D-bc]oy9#*h+~/$z~;N'^E%S1CDc~ZdnrO&dVK!(M%$L>F\|LK}'AB$++1/Wk '/?fM~]WOf]~+
Oct 13, 2024 18:06:53.293334961 CEST	1236	IN	Data Raw: 67 e6 57 b0 94 93 6a 96 45 80 e4 25 96 5c e1 63 72 df 42 f0 71 85 60 e4 49 53 61 7d d3 a4 7d 14 34 09 2c b0 0a ef a0 00 6f 3a dd 72 ea 50 d8 fe a9 8b 24 01 b4 30 da 92 39 e5 4c 75 9f 87 28 63 b7 95 f1 b4 c5 73 66 43 94 36 ad 6d 9b 33 3b bf ff 8e Data Ascii: gWjE%\crBq`ISa}}4,o:rP$09Lu(csfC6m3;X}u0VZ1[<]Sc~U0L`;m`wu:TXajYU4@ZK!,q#i6D/?t_T(EPo=t)nX`!-)^6O3W`wC-N&)T
Oct 13, 2024 18:06:53.293369055 CEST	1236	IN	Data Raw: 61 1c 6b a4 c1 2a 06 82 26 a6 5e 43 79 34 14 bb 64 d5 33 65 9d 31 1d 23 15 13 03 21 95 8a c8 22 cd c7 5b d6 74 03 e1 85 04 1a 39 56 93 96 d0 34 0d 09 ec 0d 1a a9 72 b4 10 90 37 97 6f d7 be 76 c0 f4 88 f4 13 91 2b 6d 5c 7e 29 39 1c a9 c4 9d 88 cc Data Ascii: ak*&^Cy4d3e1#!"[t9V4r7ov+m\~)9@~^tBy5\jaBt)ItlSMi=`U,lt`Lo<?=lE(_MT1b33-_x!`MKwh~ oWj/\|
Oct 13, 2024 18:06:53.293405056 CEST	1236	IN	Data Raw: 28 8f 6c d6 fe 0c da 97 a6 ce ef af d5 28 c5 83 2b 4e fd 6c 1d 5a cc c5 40 5c bb 8d 33 54 9e 46 e3 88 6c 7c 0d 0b 1f 9f 3b 67 6e 33 e2 57 8f 3e 0c 60 f9 07 11 c6 48 c0 6f 98 5d a7 01 4f 0e 68 e6 9e fa 2f ce 11 1b 42 37 1a 1d 34 b4 87 43 67 49 a5 Data Ascii: (l(+NlZ@\3TFl\|;gn3W>`Ho]Oh/B74CgI0ins$;r9$afXNj(hM\|:mLK?jQsW4pz;KfJdmjDVL+\|dXXQTGM9qLGz!z]}nEH<-[p
Oct 13, 2024 18:06:53.298026085 CEST	1236	IN	Data Raw: 29 f9 42 86 ba 88 ab 7f 25 1d 4b 48 55 65 5e dc 51 4a e3 0b 76 0d 53 c1 b3 43 bd e8 c7 ab d0 91 62 2f 00 a5 8c f1 16 2f 78 90 2d 5e 8b 07 31 30 8b 7d e7 f7 d6 9d 14 46 de b8 6b 49 cb e7 21 f9 e7 bb f4 87 e2 ba 75 11 5d 72 27 f1 2e 98 5f 25 5b 2f Data Ascii: )B%KHUe^QJvSCb//x-^10}FkI!u]r'._%[/;NL5[wH1 Qn_q.vTh-Vu:,n?p\|'P:BV);Zkh DjYX-E/h"Ba56."Y\6(;:%Dv;,b:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49740	47.76.171.224	80	2136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 18:06:52.970406055 CEST	424	OUT	GET /assets/index.e114e1a4.css HTTP/1.1 Host: account-update-amazon-gift-card-collection.9d6ihdz43.top Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://account-update-amazon-gift-card-collection.9d6ihdz43.top/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 18:06:53.882597923 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:06:53 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Fri, 11 Oct 2024 08:41:34 GMT ETag: "577e0-6242f74542b80-gzip" Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 49155 Content-Type: text/css Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed bd 69 97 63 39 6e 28 f8 7d 7e c5 75 e5 a9 d3 a9 2a dd 68 2d 21 c5 76 aa 8e bb db 4b 7b e6 f9 cd cc f3 72 a6 a7 5d 8e 73 43 ba 8a 90 53 21 e9 49 8a cc c8 d2 e4 fb ed c3 9d 20 09 70 b9 52 d4 62 b7 cb 5d 95 a9 4b 82 00 48 82 20 00 02 7f 3d 7b 6a 76 fb f6 50 7d f5 2f ff fc 77 f5 f5 57 77 bf fd e6 af aa f5 66 f7 dc ac 96 3f b6 17 b3 fd be fa 78 7d 31 b8 18 56 ff 5f f5 8f ff f0 cf d5 7f 5b ce da f5 be 65 7f 7b 5c 1e 9e 5e 1e 2e 66 9b e7 df ae db d9 66 d5 ec 7f eb f6 fb e6 b7 4f 87 e7 d5 71 b5 5c b7 f5 53 bb 7c 7c 3a dc 0e 2f 86 93 bb fa 53 fb f0 61 79 a8 0f ed eb a1 de b3 d6 75 33 ff 8f 97 3d fb 3a 18 7c fd e5 61 33 ff 7c 7c 6e 76 8f cb f5 ed e0 cb 73 b3 5c 1f e7 cb fd 76 d5 7c be 7d 58 6d 66 1f be 3c 0d 8f 8b cd 5a f6 bc 1d b5 cf 77 aa f1 c5 f4 aa 7d ae 06 5f 9e 76 c7 87 cd 2b ff bc 5c 3f de ce 58 d3 96 b5 66 3f dd 29 24 06 77 9b 8f ed 6e b1 da 7c ba fd b8 dc 2f 1f 56 ed 97 ed ae 95 40 17 cd f3 72 f5 f9 f6 79 b3 de ec b7 cd ac ed 9b 3f dd d9 41 87 ed f3 97 e6 f8 d0 cc 3e [TRUNCATED] Data Ascii: ic9n(}~u*h-!vK{r]sCS!I pRb]KH ={jvP}/wWwf?x}1V_[e{\^.ffOq\S\|\|:/Sayu3=:\|a3\|\|nvs\v\|}Xmf<Zw}_v+\?Xf?)$wn\|/V@ry?A><6/ynfp_a;y]o }kiwQj/aY?J\|?I6+l3o}-$hfn8{bF{_&_m7t;rj]8bB}11f\|~>Z//\o_Y3boZv<@Ydpc6W9Q[>\|kax^~8lm@[KA7?e_/v&j{m3BGM~<n^\|nW!bQ#w1f%jJ^>CCr~xiyhkencbnYMaE>{jg:f4e;9THL Cou4dufz=+$&NMRY,d),Xe4s(aejg?_W=?
Oct 13, 2024 18:06:53.882672071 CEST	1236	IN	Data Raw: 35 9f 04 26 7f 7e 5a ce e7 ed fa 07 f7 d7 db dd 66 73 38 d6 75 bb 92 d2 be 16 cb e2 f6 dd 42 fc df 1d f8 f0 b0 62 07 c3 ed bb 81 f8 3f f8 61 bb 5b 72 44 ea dd e3 c3 ed f4 b2 3f 9c 5c f7 47 93 09 6c b1 7f 99 cd d8 b2 12 2d 86 83 71 7f 78 73 d9 9f Data Ascii: 5&~Zfs8uBb?a[rD?\Gl-qxs\-b4Q2olEI8-nm\/6KCu,Zkl_:/i6hANqE8ci{W5DT{
Oct 13, 2024 18:06:53.882708073 CEST	1236	IN	Data Raw: 9b 42 f5 53 32 42 b5 87 64 5c 63 2d d4 3c c1 76 57 74 bb d6 85 38 51 2d 9f 9b fd 07 38 e0 88 5d 15 f5 ff 2e 6e 82 46 ce 42 0f 3b 8c 7b ce 86 54 a6 43 ef 8e 2c 0d aa fb cd 6a 89 49 89 27 8e 3b ca 68 cd 56 67 8c 80 ad 62 4c a0 a7 c3 41 c3 9f 05 64 Data Ascii: BS2Bd\c-<vWt8Q-8].nFB;{TC,jI';hVgbLAdpn3>i/4}y>63nWmUp^%me#8lx;rv{wL$H$4i;k`K"Gu1qyMfkG0dp0Y~}liG
Oct 13, 2024 18:06:53.882740974 CEST	1236	IN	Data Raw: 1e 5a 29 2b 45 c4 7e ca 69 a5 dc c9 bd 3b d0 05 77 a8 38 4d 84 73 86 f2 bc 00 ff 8d d3 49 c6 d4 fb 9d 1c b7 b7 d3 1e 3c 19 d1 bd 06 15 ff 87 07 c0 83 8f ec 46 b7 6f 0f 21 05 31 7f 1b 42 70 70 63 20 2f 64 aa 57 cc 81 28 fc b4 4e 73 21 67 4a bc 87 Data Ascii: Z)+E~i;w8MsI<Fo!1Bppc /dW(Ns!gJCo8OQc8[H&i<0"V4L)5.W/PC]xO7v}h]a;07RXH3V5'$iGK0gtpn 4id
Oct 13, 2024 18:06:53.882776022 CEST	1236	IN	Data Raw: 39 bc 87 30 7b f2 17 0b b9 e7 01 8c 2f 88 a0 b3 13 bd 50 0f f5 d9 8a 77 e7 54 80 c0 6c 6a 90 8c 26 c2 73 17 6d 21 25 a6 d6 82 87 38 5a f3 dd 66 cb 2e c1 6b 28 1c 32 36 11 70 85 d8 89 96 b0 a5 6d d6 f3 e1 66 ef bd 0a fc 60 9e 58 23 f2 03 fa 44 72 Data Ascii: 90{/PwTlj&sm!%8Zf.k(26pmf`X#Dr0($;:\|@o<z_4T"o>z7=lT75OW6"M/%swjkEsH#&Br:LN()RE%B
Oct 13, 2024 18:06:53.882808924 CEST	1120	IN	Data Raw: f4 4c 06 df c2 33 19 7c 2c 38 93 f1 5d 94 99 d8 b4 74 eb fd 44 67 32 4a 53 f6 32 3e fd 4c f6 a6 90 3c 29 22 ed b0 93 22 d6 3c 3c 29 62 ad c3 c3 cd 5f 59 39 38 67 9d c9 d1 f6 51 ac 73 ce 64 6f cd e7 60 9d 73 26 c7 9a 47 71 ee 78 26 07 fb 2a 7f 2f Data Ascii: L3\|,8]tDg2JS2>L<)""<<)b_Y98gQsdo`s&Gqx&/QgrT'g?in1T-{ZbgqKGq1gd[!z<tO?#v&DZGBqxy)7<qsNH\e[~
Oct 13, 2024 18:06:53.882843971 CEST	1236	IN	Data Raw: 51 be ec 1e 04 c8 d8 26 ba d6 54 a4 89 7e f5 f7 b4 d9 2d 7f 64 0c 68 56 ce 29 4c 35 d7 ab 02 63 95 6d bd 79 09 73 18 41 75 40 15 f3 c3 9f fc 1b 78 00 b7 be fb c1 ac 4d 4f e8 79 ab 92 df aa 9a 25 cf a5 a1 13 de 88 12 45 f1 61 55 2d b2 b2 82 08 e4 Data Ascii: Q&T~-dhV)L5cmysAu@xMOy%EaU-0K8EvXCLc#4L-'.]Fnag-L35zF+*Cu_V+Z0?%b<0xT:@obG]DWL[~-p72^
Oct 13, 2024 18:06:53.882877111 CEST	1236	IN	Data Raw: fc d7 ed 46 ca 91 d8 bd c2 ac c6 34 a0 7e aa 41 65 ff a8 fd c5 ba 62 41 8e d1 28 89 c0 9f e7 cd a1 51 7f 96 d3 c1 ba 1f fe fd 3b 76 59 ff 21 35 36 2c a3 86 e4 24 e6 55 4a 83 8f 9d 11 92 7e d8 34 4e aa dc 2a 89 15 ac e1 76 0e bc 38 0f 4e c7 0a e7 Data Ascii: F4~AebA(Q;vY!56,$UJ~4N*v8Ndgi^6h'&vW_$Kyte5DSp?{6-:9q$M<^yE/Gu1U~F;YJ8~u<-cjur;)8sADPSJc<'NX
Oct 13, 2024 18:06:53.882916927 CEST	1236	IN	Data Raw: a4 34 fb b2 a7 14 ba 97 7a 94 a5 f4 be 10 1b f9 5d 05 aa 85 9f b3 dc eb 82 e3 c1 55 22 23 a1 2e 86 0a a5 b4 bb 6d 13 45 56 5c ad 80 e8 aa de f7 38 ef 44 a8 57 10 61 67 11 34 45 ce 06 f2 94 21 00 a1 85 15 86 87 73 30 30 b0 bb 26 81 8f 0b ec 04 ae Data Ascii: 4z]U"#.mEV\8DWag4E!s00&@L=CC;se9DSR!"}bIA}x[<MHB8dfapl=3@8e_n51s\|$E~R=3TL^\Mpl8:
Oct 13, 2024 18:06:53.882956028 CEST	1236	IN	Data Raw: a6 9c 1e 02 b5 6b e2 68 cc a6 1c ae 68 65 e9 2d 50 b2 86 ae 96 05 21 4a 22 69 e5 ca 6d cb 29 53 3a 95 53 72 22 24 07 a8 52 13 4a 83 9e 10 2a b4 d5 ae 86 05 ea d5 d0 d5 af 08 e0 92 5e 5a d3 22 bb 71 d2 95 ce 35 c9 55 a5 87 40 fb 9a 50 ca f4 04 d7 Data Ascii: khhe-P!J"im)S:Sr"$RJ^Z"q5U@P_V_CW#K.sA`\ztVOvhUa5tiYieo)TJ4[r5)5,PE4i=b_flgpZ;#q.(WYWp[UlX]e*X
Oct 13, 2024 18:06:53.887773037 CEST	1236	IN	Data Raw: 6c a6 bf 85 35 3f c1 df c2 7b 43 b2 73 04 9e 25 3b cb df a2 e9 2f f6 b7 68 46 94 fa 5b 58 bf 13 fc 2d bc 37 e4 48 ce 3d da 72 24 cb df a2 39 52 ec 6f d1 1c 29 f5 b7 b0 7e 59 fe 16 de 0e d2 9e 73 8d b6 b4 d3 fe 16 4d 70 9e bf 45 53 99 e5 6f 61 8d Data Ascii: l5?{Cs%;/hF[X-7H=r$9Ro)~YsMpESoaO%8i/h6[X-7H}r$9Ro)~sq-\6[2](bbJ-[2d[_-/NJVbZ-[2-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49743	47.76.171.224	80	2136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 18:06:56.605673075 CEST	425	OUT	GET /assets/Bottom.0424dd3e.css HTTP/1.1 Host: account-update-amazon-gift-card-collection.9d6ihdz43.top Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://account-update-amazon-gift-card-collection.9d6ihdz43.top/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 18:06:57.517940998 CEST	678	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:06:57 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Fri, 11 Oct 2024 08:41:34 GMT ETag: "2c7-6242f74542b80-gzip" Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 373 Content-Type: text/css Data Raw: 1f 8b 08 00 00 00 00 00 00 03 a5 91 3f 6f dc 30 0c c5 f7 7e 0a 17 5d 72 80 65 c8 77 96 0b c8 53 b2 b4 4b a7 4e 45 d1 81 27 cb 36 11 5b 14 68 e6 e2 34 f0 77 af ee cf 70 c1 35 5d 0a 0d 92 40 be 9f de a3 e0 67 0b 02 ea a0 ca da e8 76 df 7d fe f5 da 51 10 35 e3 6f 6f cb 6d 5c 1a 47 23 b1 fd a4 75 5d 3b dd 88 5f 44 b5 de 11 83 20 05 fb 14 5a cf 23 06 bf c2 0d c9 0e 74 f0 fc 7a 01 b8 ca 18 fd 2f 40 01 2a ed 8f 2a 10 4f 30 fe a7 af 40 67 62 a0 67 86 78 0b 7b 1e 50 bc 9a 23 38 6f cf 3d 6b 31 b1 da 9a db d6 09 b8 c7 a0 18 fb 41 ec d6 c4 65 2d 5a 3c 60 eb 8f 76 fd bb fd 42 d1 6e eb 64 74 f0 27 65 55 a5 f3 1e dc 63 cf 94 42 db a3 18 58 f5 0c 2d fa 20 77 42 d9 9e 44 68 ca b9 df c3 9d ce 8f ab 28 ab cd 9b bb de 6d b2 5d 5c 72 61 08 c9 3d 27 e5 66 2d ce 42 85 a1 a3 bf 44 c5 56 06 bb 33 3a bd 7f 1a 13 8c d8 07 eb 92 d4 73 73 76 6b 75 06 4f 42 6f 48 59 e1 28 be 9c 62 df 42 2f d3 37 c6 34 57 ff 52 c6 e5 23 4e 91 58 20 48 73 4c a8 2e e9 cb a2 aa cd 55 ed 24 ea 60 c2 f1 c5 7e 45 86 e4 81 b2 ef 29 53 f6 e5 21 ff 86 8e [TRUNCATED] Data Ascii: ?o0~]rewSKNE'6[h4wp5]@gv}Q5oom\G#u];_D Z#tz/@**O0@gbgx{P#8o=k1Ae-Z<`vBndt'eUcBX- wBDh(m]\ra='f-BDV3:ssvkuOBoHY(bB/74WR#NX HsL.U$`~E)S!iN=#j]s52Z?!v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49744	47.76.171.224	80	2136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 18:06:56.607004881 CEST	424	OUT	GET /assets/index.6c0ee150.css HTTP/1.1 Host: account-update-amazon-gift-card-collection.9d6ihdz43.top Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://account-update-amazon-gift-card-collection.9d6ihdz43.top/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 18:06:57.508120060 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:06:57 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Fri, 11 Oct 2024 08:41:34 GMT ETag: "feb-6242f74542b80-gzip" Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 1041 Content-Type: text/css Data Raw: 1f 8b 08 00 00 00 00 00 00 03 bd 57 4d 8f db 36 10 bd f7 57 b0 59 e4 66 1a 94 6c f9 83 3a 25 97 f4 d2 4b da 4b 51 04 01 2d 92 36 b1 94 28 50 f4 47 ba d8 ff de 21 65 d9 92 25 1b 5e 6f 10 e9 60 41 26 87 6f 66 de bc 19 8d f7 cc 16 78 65 0e ff 72 e6 18 de e1 d9 6a 2e 97 22 11 df 5e b8 aa 4a cd 7e 50 a9 c5 21 5d 19 cb 85 a5 95 d1 8a a3 a8 3c a0 a7 6c 4a e0 4a f7 8a bb 0d 9d 2c 48 e9 17 1d 70 a5 fe 53 c5 9a d6 eb bd e1 b4 64 9c fb 57 d1 14 b6 45 8b b2 31 86 2d e3 6a 5b 51 ff 26 67 76 ad 3c 0e e7 4c 4e a3 a4 3c bc 8e 1b 64 a8 7e 72 ca 69 d1 47 29 4d e1 fc a1 82 46 73 30 94 19 6d 2c 6d c0 d5 66 29 41 04 4d 4e 26 9d 38 b8 be 9d ce c6 5b 2b d1 58 68 ac 8a 72 eb be 7f df 5b 56 96 c2 be 74 a2 13 9f a3 f3 3a bc 5b 1a 9b 63 e5 44 fe d2 f5 fb da fa ee 69 63 55 81 85 6c 5b bd ac 58 f6 bc b6 66 5b 70 7c 84 2f e7 52 48 d9 04 f8 f8 92 90 79 b4 48 ea ec 6c 18 37 fb 10 90 10 12 00 ba 90 13 c9 46 24 24 35 40 27 32 82 2b 9e 21 55 54 c2 bd 8e 33 88 30 53 85 b0 fd a0 d5 c9 8f 08 f9 d8 5a 86 d8 cd 2c c5 e7 2c 11 32 9b 65 24 [TRUNCATED] Data Ascii: WM6WYfl:%KKQ-6(PG!e%^o`A&ofxerj."^J~P!]<lJJ,HpSdWE1-j[Q&gv<LN<d~riG)MFs0m,mf)AMN&8[+Xhr[Vt:[cDicUl[Xf[p\|/RHyHl7F$$5@'2+!UT30SZ,,2e$a\d2LAa5mnbJ\;mW<0N/O@6t\,^[']GX8hmr72+x[izS-`T7"J(AB_>T5`UL*.%Ccn?N(m?`HU2yXW st)PT1h2s~=KPs1 -Kc+\jkMf+q&{_Qe0AExDXEXnS!/iEM%) DuMT=P"^8.3x9m0nI/}UV"_3%Uumaq=ifo_&4A377\|iMb1wS\|x@JEgAc77`j#
Oct 13, 2024 18:06:57.508143902 CEST	111	IN	Data Raw: a5 a9 54 18 1c ad d0 30 41 ee c4 9b 51 a0 cd c0 94 38 3c b3 ce 67 fe ee f5 9e 5f 32 87 5d 8f 1a 5d 09 e8 5d 62 f4 7e 43 4c ba f0 09 00 91 2d 1c fd f0 21 f5 79 a0 51 a7 22 5a 92 77 24 fe 69 c2 bb 39 4c 77 41 58 b1 1e 96 d4 f6 60 d9 17 c7 8e 78 be Data Ascii: T0AQ8<g_2]]]b~CL-!yQ"Zw$i9LwAX`xO#mIK&Ju2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49746	47.76.171.224	80	2136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 18:06:56.607652903 CEST	406	OUT	GET /assets/index.4d461f36.js HTTP/1.1 Host: account-update-amazon-gift-card-collection.9d6ihdz43.top Connection: keep-alive Origin: http://account-update-amazon-gift-card-collection.9d6ihdz43.top User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 18:06:57.538609982 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:06:57 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Fri, 11 Oct 2024 08:41:34 GMT ETag: "1a4a-6242f74542b80-gzip" Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2536 Content-Type: text/javascript Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 59 5b 77 d3 48 12 7e df 5f 21 7a 39 8c 74 b6 ad c4 81 5c 50 8e c6 4b 02 cc 04 98 c0 70 9d c1 e3 35 6d a9 6c 75 22 a9 85 d4 b2 63 8c ff fb 56 b7 5a 96 9c d8 81 b3 cb bc b8 a4 be d4 f5 ab ea 6a 99 27 99 c8 e5 22 b4 58 61 3d a7 17 8a 64 f4 52 91 8f 34 52 64 4a 85 22 09 0d 14 39 a3 4c 91 82 c6 74 aa 1e 52 5a 2a 22 a8 54 e4 0d 9d 28 c2 e9 4c 91 9c a6 8a bc a5 5c 91 80 26 8a bc a0 63 45 66 14 14 19 d2 4c 91 0f f4 b3 22 cf 68 a1 c8 2f f4 4a 91 5f e9 50 91 df 97 e3 5c 24 c4 dd e1 69 08 57 6e 77 f4 70 0f 0e 0f 03 f7 a2 20 c7 bc 52 5e af fb 83 9e 28 f2 67 c5 0a a0 de 76 22 a4 14 89 bb 7f 74 04 f7 1f 8c bb 37 f6 15 ab 95 33 96 a7 ee de e1 83 bd 2e ae d5 eb 02 91 16 d2 12 e0 2f 82 98 15 85 47 70 40 32 9e 42 4e 96 54 36 c3 52 64 9d f6 14 6b a6 ca 02 f2 4e 2c 26 3c c5 f1 b8 19 57 c2 3a 23 71 85 a3 29 8e 16 72 1e 83 b7 20 09 cb 71 69 27 86 b1 24 1e e9 ee 67 b8 60 49 f9 26 7e 66 77 8e 73 63 91 7b 84 65 43 48 18 8f 09 35 4b 59 07 c7 93 4e cc 46 10 e3 c2 b2 61 c2 82 40 94 a9 ec f0 74 [TRUNCATED] Data Ascii: Y[wH~_!z9t\PKp5mlu"cVZj'"Xa=dR4RdJ"9LtRZ"T(L\&cEfL"h/J_P\$iWnwp R^(gv"t73./Gp@2BNT6RdkN,&<W:#q)r qi'$g`I&~fwsc{eCH5KYNFa@t,p&kylqW\|<At2@gr*kFI4isH i7mE!qKN"%hP@&8j+66({c0j{& ;NOpNm%)))R=3vo>"0exDMYfEwqUG^5FHV3_./g/:w;ag/{@zB3~&P=,l^\|z-$e&8=-YkBy.zbNYuu5$!W>!=4k.DxV0,hxjKWLJ(&[+,\|aEt\WugInrR< suwLn %',OhVqSk~ULdc6cK%=Y1O RGGz+!.`
Oct 13, 2024 18:06:57.538657904 CEST	224	IN	Data Raw: 32 6b 35 d5 35 80 9f f8 8f 6d cc f5 11 66 c0 e4 de bd 95 38 9e f9 08 b2 91 3d 71 ea cc 00 9f cd 18 47 0a f5 22 e7 b8 66 0c 6e 82 01 40 f0 62 8e 16 05 d6 a9 37 08 50 8d 65 90 67 12 12 9b 98 f1 33 d4 4e 8d 9a 17 67 33 22 7a e0 ca 39 96 62 34 35 87 Data Ascii: 2k55mf8=qG"fn@b7Peg3Ng3"z9b45)\|_&@fg#wUYYD"c2Jk0gUxSOEXgk. @=IoKXT(O")f./8"02\|?{1kj76*
Oct 13, 2024 18:06:57.538671017 CEST	1236	IN	Data Raw: 99 f6 19 a2 6a 9b 11 39 04 c0 a7 f0 82 17 52 59 12 32 c9 9c ad 10 fa 2e 8b cb 58 19 bd 6e 56 55 b8 b6 db 95 05 6a ea 5b 8e fa 1b c2 5b 7b 68 7b 94 d7 1c f4 ec cd cb 73 3c 1d 72 9e 4e b0 11 b1 8d bf fe 06 87 fd d0 a4 fb 26 08 bf 27 d3 5a 21 bc 8e Data Ascii: j9RY2.XnVUj[[{h{s<rN&'Z!<9D lZ.%I1W<9tjO(8sgjQJIznu{rQJNy68vZRV$6B~ae3G_mMz]Wmy
Oct 13, 2024 18:06:57.538686991 CEST	154	IN	Data Raw: 1a e2 84 49 51 d3 77 b7 fa 1c 62 bd 89 44 66 89 d4 94 25 eb c4 b0 b3 8c ab 36 25 e1 60 e3 51 54 03 69 a6 2b a2 e9 50 90 6a e3 a2 fd 5a e0 39 cc 9a 2a d8 23 95 0c e7 f6 c3 6d 75 ec a0 29 fa d0 d9 04 34 73 a2 75 eb 23 2d 07 ec 04 2a a0 19 db cc 95 Data Ascii: IQwbDf%6%`QTi+PjZ9#mu)4su#-}T?taBpX"vg9>t1&LctZJJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49745	47.76.171.224	80	2136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 18:06:56.607700109 CEST	407	OUT	GET /assets/Bottom.588e34f1.js HTTP/1.1 Host: account-update-amazon-gift-card-collection.9d6ihdz43.top Connection: keep-alive Origin: http://account-update-amazon-gift-card-collection.9d6ihdz43.top User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 18:06:57.533652067 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:06:57 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Fri, 11 Oct 2024 08:41:34 GMT ETag: "1110-6242f74542b80-gzip" Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2424 Content-Type: text/javascript Data Raw: 1f 8b 08 00 00 00 00 00 00 03 dd 58 59 8f a3 48 12 7e df 5f 61 59 da 9d 6e e1 6a c0 36 18 aa ba 66 05 d8 60 83 31 e6 30 60 f7 b4 4a dc 37 c9 7d b8 a7 ff fb da d5 33 a3 dd 99 9e d5 6a 55 2f bb 3c f0 05 99 91 5f 44 46 a2 c8 50 44 59 01 aa e6 cb 38 b1 ea 49 33 7b b9 43 3e 03 77 f0 66 ce 1d ea 99 7d 87 ea ab 5f 81 6c fa 01 8e 72 d7 1b 3e a0 36 39 f7 56 2b e7 43 5c 4f 9f 1c 90 d7 cd 84 7a 9e ba 56 63 3d 46 99 15 78 70 91 07 4f b6 55 7b f8 72 16 e9 b4 a4 f4 88 c0 05 80 ba 3d 07 f5 14 6e 4e c1 4d da ca f7 ef 8e a1 ce 77 1c 11 68 a9 dd 05 ca 3c a8 0a b2 a3 aa 7a e9 e0 af 2a 4a 2e 9f 50 9a a2 98 21 ee 3b e2 2c 9f ee 83 bc b3 09 2f 4e 4f 51 9b fc a6 44 f3 08 e5 62 d9 76 71 27 36 2f ea 49 a1 f5 6d e8 ad 2e ce 10 87 fa 76 b3 b3 17 34 df 2a 41 2c 8e e3 6e b3 9f d3 e7 6d c0 c7 54 44 f7 cc 96 a0 77 c7 80 39 a7 14 dd 63 c1 e8 48 57 ba a7 18 7a 5c f2 27 47 a2 b6 bc 5c 0e 0b cb bb 54 9d c1 57 30 ea 90 48 0f 7b d7 7d 7f b9 aa 90 ee e6 5e 56 e0 2d de 95 55 bb a8 e6 88 c5 5e ac 40 c4 44 86 64 2e 96 bc c1 c5 11 a5 2e f8 [TRUNCATED] Data Ascii: XYH~_aYnj6f`10`J7}3jU/<_DFPDY8I3{C>wf}_lr>69V+C\OzVc=FxpOU{r=nNMwh<zJ.P!;,/NOQDbvq'6/Im.v4A,nmTDw9cHWz\'G\TW0H{}^V-U^@Dd../x[zLrhi37i~hVIG$!wJ-Q#naW"=,rhK/3iNBb=O~XdQ'qg6L9)=p&Vk:/`;D^XsS$zIN$b&\/8+os"(?q],hVl/2`};yzKu\4msr(AjGeiFMi{Vf0T>0W$(F&C3W!tfk\4%xNr]Kst~\|?-8PDHTA{Fd:iP^#][g8C$!9U"m@c#Qb%#D8U(6sQyx^$Tq:])a6Uj3fLi^CA*k Ce:08b#,@f.Py!k<ivm29lWg
Oct 13, 2024 18:06:57.533689022 CEST	1236	IN	Data Raw: bf 38 c5 14 87 a0 ec 56 b4 16 5c 19 0f 42 50 f2 dd 52 07 04 7f ea 17 32 ce 63 c1 40 94 81 2c 48 bc 2a e0 b0 6c 94 e3 d0 53 96 7b 51 1a 4b 3d b3 db 80 3b d8 a5 72 76 c5 64 c4 fd 10 8c e4 fc b2 6e 4c bb 70 78 66 5e b3 31 75 38 b5 91 c1 14 f1 3c 12 Data Ascii: 8V\BPR2c@,H*lS{QK=;rvdnLpxf^1u8<jQYS_G`ta58/3@6DcbZj6$UpgjHx)2rkVP:BL[D6Z\|R-Eq5OxI8ZiK%A
Oct 13, 2024 18:06:57.533721924 CEST	266	IN	Data Raw: 04 f9 a3 93 13 06 e4 6e 74 3f bd 7a 02 fc c9 a9 f6 26 1f 61 eb c7 8f 75 61 e5 bf b9 df 36 e1 c3 37 0b 0f b5 57 78 95 d5 80 ea 7b 07 75 5f 74 83 34 fa ff 8a 6a 51 45 9d e5 8c 2f 39 b8 5d 93 de bf 09 30 fa bd 00 1f bf ad 9e 1c 5e 57 ff 8f 47 f7 4f Data Ascii: nt?z&aua67Wx{u_t4jQE/9]0^WGOzw66$b l"'(I?Yr62f]\|j5(nZKy}0>O]O\~^7A;;X3;[Ow

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49747	47.76.171.224	80	2136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 18:06:56.608294964 CEST	405	OUT	GET /assets/warn.2742188e.js HTTP/1.1 Host: account-update-amazon-gift-card-collection.9d6ihdz43.top Connection: keep-alive Origin: http://account-update-amazon-gift-card-collection.9d6ihdz43.top User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 18:06:57.539330959 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:06:57 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Fri, 11 Oct 2024 08:41:34 GMT ETag: "1505-6242f74542b80-gzip" Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3883 Content-Type: text/javascript Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 57 c7 ce c4 46 72 be fb 29 16 7b a5 01 e6 64 61 0f 4c c3 38 cc 69 78 31 98 87 39 47 c3 ef 6e fe 92 b0 92 d6 be 9a 40 63 9a c5 9a ca 5d f5 75 3a f4 cb fa 37 e6 1f 7f cf e2 35 fe 8f aa 8b cb 1c 1c fb f2 97 24 5e 72 02 fb 77 90 ae 41 8c 61 2c a7 89 14 bb 64 58 c6 62 9e b7 e7 97 e1 41 e4 e0 04 86 69 44 f6 94 1d e1 f9 22 d8 72 f0 b2 3d ff 65 97 be c8 7a cf 62 9e bd 17 be 4e 2f 78 7d cb e7 db e7 23 39 65 29 b2 43 2b 9d 9e 2f bb c2 57 71 9a 59 ab 30 58 64 a9 db e0 df 8b 7e 95 ab 56 2d 2c 57 0e 2a 5f 42 86 78 32 96 78 41 ad cc c9 ab e6 40 fb b3 56 fd 82 7e f6 bf 2d f7 57 3a fc cf f7 7f 59 fa 9f df 0b 90 61 58 41 66 64 86 29 99 37 2b 58 0c 27 58 02 2f 58 12 78 32 4c fa 78 c6 31 e5 fb 37 1f ff f4 b0 87 20 3e f4 17 c7 b8 3f 7c f8 e3 34 cb 1c 32 cb 31 a9 fc d0 19 e6 f8 8d 8d 61 64 9e 65 85 93 b5 3e 92 50 fd 78 2b 54 96 a7 78 69 64 da c2 69 f9 f2 fd 78 1b 0b c1 f1 51 1d 8a d7 ab 63 07 05 86 5d 7e f4 71 cc f1 44 f0 5f d4 b2 96 25 b2 c7 9b 03 29 eb c7 da c7 68 81 67 ac 94 67 0e 8b [TRUNCATED] Data Ascii: WFr){daL8ix19Gn@c]u:75$^rwAa,dXbAiD"r=ezbN/x}#9e)C+/WqY0Xd~V-,W_Bx2xA@V~-W:YaXAfd)7+X'X/Xx2Lx17 >?\|421ade>Px+TxidixQc]~qD_%)hgg],.a?2 #U%`XuR1\|-h@;UaG_mSrWQRXRL`i" GcQ38t]O!o5w^"0%;Ca)<6m+P6$oH!WII8E-+fC}IQVx!'_jDzR6tB(%)RGnHZ$xGd2}J3DR;bT1Ep7oR@Zpf0_Pz.0/(RKnkAtZA!Vs3!SGD5}.T"%mIVN{[_m)HfD<uY#OC\|wSazq5EMdqSd[zj<sbF
Oct 13, 2024 18:06:57.539380074 CEST	1236	IN	Data Raw: e4 b6 e5 63 df b1 b7 e2 bb 52 6b 82 a4 6b 8e 56 3e 0f 99 94 d8 d7 c2 70 eb ab 9f cd c2 71 f7 79 09 b1 31 15 2f 84 87 86 7b 8f f3 f9 14 25 c5 83 f3 0e 73 8c 2e 51 76 19 f5 b7 1e 86 3e 17 2d 06 a9 b4 bf 74 92 c5 81 88 ff 24 69 f8 26 15 fc 23 1d 22 Data Ascii: cRkkV>pqy1/{%s.Qv>-t$i&#"%'&0MWUYf)x63K1+v=7+g~:Hn#K x`zjO"Ba;8.e,d\|]ez>\$~7pwP
Oct 13, 2024 18:06:57.539397955 CEST	1236	IN	Data Raw: 20 9d 1b 37 59 62 c1 20 30 77 0d 38 11 54 d2 19 71 14 93 c2 44 b6 20 9b dd df 58 52 03 d8 34 b5 84 c0 19 f4 e4 03 60 ae f6 47 93 10 98 53 3e 76 58 cd 2f 3b 09 1e 3c 5b 69 46 34 73 b2 bd b4 b3 42 05 3e c1 b6 36 af 30 60 0c 93 89 f4 dd 64 ac 44 4c Data Ascii: 7Yb 0w8TqD XR4`GS>vX/;<[iF4sB>60`dDLxck^'_Q)Ob}\.\|DSCyO!'1$us^EH&#1w<xUo-QGiAtOrN]O/-gISyAvh'hVXhdmoU~dBT
Oct 13, 2024 18:06:57.539448023 CEST	489	IN	Data Raw: de e4 3f c0 59 ec a0 1b 8f 43 55 80 fc f3 a5 d2 2d f5 80 76 04 35 c5 33 bc 45 0f 23 44 3b 58 89 57 21 09 4e 44 33 17 ed d3 44 4f 21 2e ec 51 71 d1 7c 76 88 80 28 c1 a5 8a 07 1e bb 40 a2 13 53 ae 9b d7 d3 53 90 1e 83 24 aa 9c 8d df c8 e3 39 f5 8d Data Ascii: ?YCU-v53E#D;XW!ND3DO!.Qq\|v(@SS$99#vw>DmR'M`b>A=LT$A=Bv= &7WKB"'L&`^qtnD&_ywYC>iiT;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49748	47.76.171.224	80	2136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 18:06:57.043142080 CEST	333	OUT	GET /assets/index.1b92e77c.js HTTP/1.1 Host: account-update-amazon-gift-card-collection.9d6ihdz43.top Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 18:06:57.962874889 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:06:57 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Fri, 11 Oct 2024 08:41:34 GMT ETag: "113213-6242f74542b80-gzip" Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Transfer-Encoding: chunked Content-Type: text/javascript Data Raw: 31 66 61 61 0d 0a 1f 8b 08 00 00 00 00 00 00 03 d4 bd 79 5f db c8 d2 28 fc ff fd 14 e0 97 cb 95 86 c6 b1 81 00 91 a3 f8 0d 5b 20 10 92 81 84 2c 1e 8e 47 c6 32 78 90 25 47 92 cd 66 7f f7 b7 96 de 24 9b cc 9c e7 de e7 77 cf 7b e6 04 4b ad de bb ba ba aa ba 96 71 90 2e b4 4f fd 8f 9d bf c2 ab bc da 0d 7b fd 38 fc 94 26 c3 30 cd 1f 1a 63 f8 b8 7f ea 3b a1 c8 45 ec fa 6f f2 85 7e bc 10 36 db a7 94 f2 14 c6 a3 41 98 06 9d 28 f4 16 6b e2 2a 89 7b fd eb 91 7e bf 4b fb b9 7a 1e 07 d1 28 f4 e2 a9 eb 85 ad fc d2 8f a9 e6 9f bb a6 66 67 9f ea 7c 18 86 49 6f 21 5f f4 2b d9 c3 a0 93 44 95 66 be 52 a9 78 98 07 fe df 70 7a a3 f8 2a ef 27 b1 e3 3e 41 73 59 be 90 fb dd e4 0a 7a 11 e7 d5 ab 34 0c f2 70 3f 0a f1 cd a9 44 fd f8 b6 e2 56 d3 30 3a e9 67 79 a3 df 73 f2 e5 e5 bc 9a 8d 86 c3 24 cd 33 fb d9 a9 0c 92 ee 28 0a 87 90 39 09 ba 15 d7 4d c3 7c 94 c6 8d 5e 92 3a dc 4e b2 00 fd d2 4d fd 1c 85 e9 c3 79 18 c1 94 25 e9 db 28 72 fe 17 b6 d6 82 e2 7e a9 aa cb ff 05 95 39 89 db 88 c3 bb 85 0f a3 3c c0 de 7f ec 64 61 3a 0e [TRUNCATED] Data Ascii: 1faay_([ ,G2x%Gf$w{Kq.O{8&0c;Eo~6A(k{~Kz(fg\|Io!_+DfRxpz'>AsYz4p?DV0:gys$3(9M\|^:NMy%(r~9<da:!dU+W7&cjfnT`@eNN+=Z^N{Q'.Y6i7ujb6xj?kXe~/HK0MtD+>Q_$q@,\BAUAz+u7S2af$~^J`gW)C+/jrp0l70&?~[Ev@{6$:WZA78h!pZ~gae0Sa>~{>>?o~>o~{qfIGQZ#lak!y+jcM!rC#u)w`)=-o m\Xz\Hsr@M&\qgyk?q*IeyWp,_0RnG@yRpW0;Ng5i'c7A.VS/6
Oct 13, 2024 18:06:57.962938070 CEST	1236	IN	Data Raw: 4d 83 87 6a 3f a3 5f 91 8c b0 c3 a7 5d 58 10 84 d2 56 42 f5 2e 7c 08 86 97 15 71 76 33 f7 e3 79 98 c3 c7 df a3 b9 1f f7 60 a4 f0 b5 9b e3 57 89 55 01 37 54 d4 e2 57 44 bf fc 29 03 78 8a af a1 b9 a0 fc 81 31 b1 f8 48 25 c2 45 df 47 e8 00 fc 69 b2 Data Ascii: Mj?_]XVB.\|qv3y`WU7TWD)x1H%EGipw11L&]qz`W~sv!NM9mV3ZmZwaXB}48,j0HPCqrAmiI\|~HFBeb?o,F
Oct 13, 2024 18:06:57.962977886 CEST	448	IN	Data Raw: 87 67 e4 e9 a6 58 73 3d 3d 38 78 57 87 35 14 86 73 ea 94 c6 a5 8a 27 23 4c 7b 6a fd 09 64 ae b3 f4 04 ec 78 ff 31 9c ba 7f 5e 7a 2d 3c 9d ab 21 72 38 61 06 38 0f d0 69 77 04 d8 14 c6 dd 4a 45 72 09 9c 14 50 99 71 eb 60 e0 a4 f0 0c 98 c6 7f 53 01 Data Ascii: gXs==8xW5s'#L{jdx1^z-<!r8a8iwJErPq`SR8yUSf8PRIr ?2Y$C)ij#hyN3tA8?5vy%b8?pjsi2qB'N4St5c*6(!GWQ
Oct 13, 2024 18:06:57.963012934 CEST	1236	IN	Data Raw: 63 01 92 47 a4 73 c7 12 bf 4e 89 02 2a 8c 25 be ac 52 b5 6e b9 b0 02 f8 b9 a5 d5 47 e4 34 dc 79 cb 61 55 54 5c 8e 42 35 72 39 54 1f 00 9f 63 5d 8b 85 0d 2a e1 82 a7 00 b0 54 ae a6 36 b1 e7 46 b5 32 a4 a1 24 cb cb 78 0a e2 77 b5 09 0b d9 5a 66 5f Data Ascii: cGsN%RnG4yaUT\B5r9Tc]T6F2$xwZf_"VM5]v@`ab`ajEX=\X;k%+!9szm=LBb/3%}q_T14:77^0j_\|)vH
Oct 13, 2024 18:06:57.963052988 CEST	1236	IN	Data Raw: 44 b1 1f 9c 3a f7 3c bb 48 c2 d1 ae 6a 5a 70 2a 93 e8 2c b4 9e 2d 48 b7 52 fd d8 f5 e4 ab 5f 48 c6 4c 1a d9 7f dd 74 62 57 8b c5 e3 c2 09 4a 7b 44 25 d8 53 0f bb 55 ed 72 5b 70 2f d3 1a a9 ee b0 ee ba d0 4f f6 c6 d3 1d 4f 5d 31 7f 94 71 69 5f fe Data Ascii: D:<HjZp*,-HR_HLtbWJ{D%SUr[p/OO]1qi_a7<5+jHAq03Ck2#UG{h`kXVxV4I0}JX8"~jsFiNH\PuT@!OX"ICJ\|uv5!w/}xM~KugJ'ki
Oct 13, 2024 18:06:57.963087082 CEST	1236	IN	Data Raw: 82 0a 3d c2 ab 4e 05 33 ba 65 92 77 0b 94 83 88 54 02 f0 23 29 0c 55 34 d9 22 b4 9a 06 3c f5 b3 8b 51 08 5c c2 97 4d 22 dc 51 65 41 2a af 00 ed 65 69 9a a0 7a 7f e6 30 21 e3 56 15 1d c0 1a b9 15 8d cd 2a 52 c9 15 a7 1c 68 01 97 68 00 c8 c5 e5 5a Data Ascii: =N3ewT#)U4"<Q\M"QeAeiz0!VRhhZ.z3rL%R[ 020d1y7{bF1jjUVxJhD)DE4*J6f`.umU 40_RHtfo^t%%=iCR$K7"EKg
Oct 13, 2024 18:06:57.963121891 CEST	1236	IN	Data Raw: d8 c3 de 8f 5d c1 bd f0 7e df 15 d4 be 17 9e 2b b1 9c 07 50 0b a7 da 22 1a 56 e6 cf b6 29 30 4b ed 1f b7 6c 55 f1 7e d7 62 42 f9 7a 1e 3b 05 4b 1d e9 3c 3f 8a 79 22 ce f5 f7 7d c6 5c f1 2f fa fc cb 0e f3 67 3c 80 4c d9 bf 7a b3 9d c5 89 84 c5 26 Data Ascii: ]~+P"V)0KlU~bBz;K<?y"}\/g<Lz&\|FWu:$]LjRZ4[Hc":`O@3#B5]\^2~*[n?_6{x]9,$sXb%s8\|h3l24E
Oct 13, 2024 18:06:57.963156939 CEST	1236	IN	Data Raw: 60 9d ca 77 43 a5 2d 99 4e 26 f0 c2 da 92 29 de ef 8a 54 db 13 5a 0e 14 54 e7 cf 14 00 3f f5 07 83 b0 db 47 2f 52 29 f0 ae e1 d0 4b 44 12 5f 85 5e 20 b4 45 96 17 89 60 74 8d 1b e4 7d d2 f1 32 81 fc b0 37 9a 02 94 76 fd 36 30 76 cd b6 07 87 7b db Data Ascii: `wC-N&)TZT?G/R)KD_^ E`t}27v60v{U[ku_PHZ<p>GIBXsP~%y0b!'d7#uR1nh67*=8j`@kvPAb9GMlSV1Rtuemf~B.Z
Oct 13, 2024 18:06:57.963191986 CEST	1236	IN	Data Raw: 20 6f 57 ba c4 1a 6a 2f be c1 cc b1 db 7c d4 b4 aa 07 8f 52 73 19 46 09 64 73 0d b5 1e b4 9d 31 30 24 eb 05 4e 0f 5f 9f 16 83 2e 90 0b df ae 81 f0 c7 75 ac 09 98 f6 70 9d e7 32 5d b7 25 d9 d7 34 73 4c 3a 06 a3 aa 51 02 f7 76 22 94 6a f6 bb 6c 6e Data Ascii: oWj/\|RsFds10$N_.up2]%4sL:Qv"jln^+Elo.w\zx4f`XDI7&Z.~/*b8Rc7p>uh_raJg0r/Jsb"1ZU.N>)v)=
Oct 13, 2024 18:06:57.963229895 CEST	776	IN	Data Raw: b1 b5 7a b1 d2 5d ef 7d 8f 6e 0b f6 45 17 48 3c 2d 5b 70 f2 d9 0a 5d a8 d1 09 4b 2d 62 ba 02 f1 9d 67 a0 aa b1 b3 bc 4c cd ec 30 ef d5 15 ca d9 cb 91 fc b0 24 ee b9 7d 82 89 29 da 3b 0e 92 71 28 37 fb d3 68 80 3a 38 de 13 a7 7a c0 06 6b cb 35 6b Data Ascii: z]}nEH<-[p]K-bgL0$});q(7h:8zk5kWFfWF+d0H=F&I{F?Gr~p<2^9X\AdA{7]T+=5!P&;aD$+PX
Oct 13, 2024 18:06:57.968117952 CEST	1236	IN	Data Raw: 3a a6 e2 6a bd 10 ed 22 44 1f 3b 9f d3 d0 38 fc 27 07 40 49 0c eb da bc 5a 77 ac 57 94 f2 89 73 4d 69 ef 04 59 f8 39 0d e2 ac cf f1 6d 18 e7 8f d6 51 4f 67 84 14 c7 53 16 25 79 86 ee b6 35 2d bf 94 a3 90 c7 47 00 51 0a b8 b6 ae 12 45 01 41 ed 90 Data Ascii: :j"D;8'@IZwWsMiY9mQOgS%y5-GQEA7vL\|)XafS?"UUCmh2P3z-="IlZ#x\|>w`pvr{s9x!7w}_t>TVgU2rj)B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49749	47.76.171.224	80	2136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 18:06:57.529498100 CEST	456	OUT	GET /favicon.ico HTTP/1.1 Host: account-update-amazon-gift-card-collection.9d6ihdz43.top Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://account-update-amazon-gift-card-collection.9d6ihdz43.top/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 18:06:58.446651936 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:06:58 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Sun, 13 Oct 2024 08:38:13 GMT ETag: "4486-62457a41297c1-gzip" Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2480 Content-Type: image/x-icon Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 9b 4f 68 1f 45 14 c7 a7 fc d2 96 82 87 60 2f 01 6d cc a1 a5 56 10 da 1e 04 0f d6 62 1b 11 bc b4 d2 f4 5c 0b b6 de 84 8a 45 10 a4 88 46 11 84 84 fe 01 41 88 2d 48 72 b0 9a da 83 15 db 34 10 11 9a b6 44 a4 c5 a4 01 ed a1 49 b1 d0 3f 34 5a b4 4a c6 fd fc 66 e7 b7 b3 b3 33 bb fb fb ed 6e 7e 17 bf f0 b2 bf dd ec cc bc 79 f3 66 e6 bd 79 6f 85 58 26 3a c4 c6 8d 22 b8 f6 88 91 75 42 bc 28 84 e8 e9 09 ef 3b 85 b8 13 3c eb ea 52 f7 1f ad 12 e2 d8 33 42 74 76 aa fb d7 3b 84 e8 de 2a c4 93 41 99 a0 0a b1 47 a8 e7 e0 d0 3a 91 0b 52 ca de 80 3e 0d e8 52 40 0b b2 7d b8 17 f2 70 38 a0 e7 73 f0 bd 36 a0 f1 36 f2 9b 85 6f 03 ea f6 f0 fe 82 2c 20 eb 5f ee 4a f9 fd 0d 29 07 ae 4a 39 18 d0 81 49 29 77 8c 49 f9 de 94 ba 1f 9a 91 f2 e2 2d 29 ef 3f 2c dc 87 db 01 3d 6b f1 fe b4 54 63 d5 14 ce ce 29 3e 57 9f 94 52 8c 84 34 ac 69 51 5d 63 cf d4 fd 96 33 aa 9f d3 4d b7 d8 40 20 09 b9 d6 e0 ff 52 de 82 c8 8f b6 57 7f 19 e7 29 f6 7b c4 d3 07 bb 2f c3 aa 2f 5f 5d 6f a9 0f e7 42 de 77 e6 e5 7b 50 [TRUNCATED] Data Ascii: OhE`/mVb\EFA-Hr4DI?4ZJf3n~yfyoX&:"uB(;<R3Btv;*AG:R>R@}p8s66o, _J)J9I)wI-)?,=kTc)>WR4iQ]c3M@ RW){//_]oBw{P=aG_L1n?RBHLv1h@RgN9-&mXUyIKN sO1}W_{ya6~t7Z`7'v~//(CKCc}8,-i` Gs^P52ZW\T\CoZ\K<p''5;X=ang\|<Xs+Q3s%u$moVi6m,eKU7.J$O8rp./]Lq~Gc[e"9oj}N_q`aovoY{\eZw]z'S%?}vhiPt`Fz^?l8ujDv{/_n0& {/5^voen~_X.%\|S
Oct 13, 2024 18:06:58.446815968 CEST	1236	IN	Data Raw: 5d 60 4e b0 ee 20 bf 3c 7b ac af 6f ed e2 df 06 76 2a fa c5 7a 09 a1 fb f0 d6 ee fd b7 28 e8 93 bd 7f d9 6b d6 52 81 75 11 7e 4c 39 23 f7 34 f8 d7 ad a5 d3 9f a3 47 fd 36 10 fe 6b 1a e2 f6 53 72 1e 2f 85 0f 8f 2e fb d6 15 f6 35 73 bf b2 a1 d6 2a Data Ascii: ]`N <{ovz(kRu~L9#4G6kSr/.5sCS{-S[RY+g>`#oeB8?L;[idtF-Z?oN ~D{jMjGXri9^FCE*c<W'6VKZgb
Oct 13, 2024 18:06:58.446831942 CEST	319	IN	Data Raw: 7d f6 ae 6c 69 fe 29 e3 3e 3b 3b 2b 1f 3e 4c 3d 78 9b 92 6a 0f f3 82 fe 23 1b ed f3 41 dc e7 04 67 ec ec c1 13 79 0b 34 01 94 42 db 10 fa 3c bf 8c f8 c9 54 58 57 4d d9 4b d5 99 68 d4 8d 1d d6 29 54 cc 48 db 61 5b 3b bc 36 18 f9 05 cd c4 b5 1f 84 Data Ascii: }li)>;;+>L=xj#Agy4B<TXWMKh)THa[;6e(O7W>eo\|YB~mR>OAlA;c]Qgkd>%25gwBxeL/sUFW OL/8070l'&w7&zXo?g:(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49750	47.76.171.224	80	2136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 18:06:57.544049978 CEST	334	OUT	GET /assets/Bottom.588e34f1.js HTTP/1.1 Host: account-update-amazon-gift-card-collection.9d6ihdz43.top Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 18:06:58.449743032 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:06:58 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Fri, 11 Oct 2024 08:41:34 GMT ETag: "1110-6242f74542b80-gzip" Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2424 Content-Type: text/javascript Data Raw: 1f 8b 08 00 00 00 00 00 00 03 dd 58 59 8f a3 48 12 7e df 5f 61 59 da 9d 6e e1 6a c0 36 18 aa ba 66 05 d8 60 83 31 e6 30 60 f7 b4 4a dc 37 c9 7d b8 a7 ff fb da d5 33 a3 dd 99 9e d5 6a 55 2f bb 3c f0 05 99 91 5f 44 46 a2 c8 50 44 59 01 aa e6 cb 38 b1 ea 49 33 7b b9 43 3e 03 77 f0 66 ce 1d ea 99 7d 87 ea ab 5f 81 6c fa 01 8e 72 d7 1b 3e a0 36 39 f7 56 2b e7 43 5c 4f 9f 1c 90 d7 cd 84 7a 9e ba 56 63 3d 46 99 15 78 70 91 07 4f b6 55 7b f8 72 16 e9 b4 a4 f4 88 c0 05 80 ba 3d 07 f5 14 6e 4e c1 4d da ca f7 ef 8e a1 ce 77 1c 11 68 a9 dd 05 ca 3c a8 0a b2 a3 aa 7a e9 e0 af 2a 4a 2e 9f 50 9a a2 98 21 ee 3b e2 2c 9f ee 83 bc b3 09 2f 4e 4f 51 9b fc a6 44 f3 08 e5 62 d9 76 71 27 36 2f ea 49 a1 f5 6d e8 ad 2e ce 10 87 fa 76 b3 b3 17 34 df 2a 41 2c 8e e3 6e b3 9f d3 e7 6d c0 c7 54 44 f7 cc 96 a0 77 c7 80 39 a7 14 dd 63 c1 e8 48 57 ba a7 18 7a 5c f2 27 47 a2 b6 bc 5c 0e 0b cb bb 54 9d c1 57 30 ea 90 48 0f 7b d7 7d 7f b9 aa 90 ee e6 5e 56 e0 2d de 95 55 bb a8 e6 88 c5 5e ac 40 c4 44 86 64 2e 96 bc c1 c5 11 a5 2e f8 [TRUNCATED] Data Ascii: XYH~_aYnj6f`10`J7}3jU/<_DFPDY8I3{C>wf}_lr>69V+C\OzVc=FxpOU{r=nNMwh<zJ.P!;,/NOQDbvq'6/Im.v4A,nmTDw9cHWz\'G\TW0H{}^V-U^@Dd../x[zLrhi37i~hVIG$!wJ-Q#naW"=,rhK/3iNBb=O~XdQ'qg6L9)=p&Vk:/`;D^XsS$zIN$b&\/8+os"(?q],hVl/2`};yzKu\4msr(AjGeiFMi{Vf0T>0W$(F&C3W!tfk\4%xNr]Kst~\|?-8PDHTA{Fd:iP^#][g8C$!9U"m@c#Qb%#D8U(6sQyx^$Tq:])a6Uj3fLi^CA*k Ce:08b#,@f.Py!k<ivm29lWg
Oct 13, 2024 18:06:58.449776888 CEST	224	IN	Data Raw: bf 38 c5 14 87 a0 ec 56 b4 16 5c 19 0f 42 50 f2 dd 52 07 04 7f ea 17 32 ce 63 c1 40 94 81 2c 48 bc 2a e0 b0 6c 94 e3 d0 53 96 7b 51 1a 4b 3d b3 db 80 3b d8 a5 72 76 c5 64 c4 fd 10 8c e4 fc b2 6e 4c bb 70 78 66 5e b3 31 75 38 b5 91 c1 14 f1 3c 12 Data Ascii: 8V\BPR2c@,H*lS{QK=;rvdnLpxf^1u8<jQYS_G`ta58/3@6DcbZj6$UpgjHx)2rkVP:BL[D6Z\|R-Eq5O
Oct 13, 2024 18:06:58.449790955 CEST	1236	IN	Data Raw: 78 49 38 5a 01 ec 69 de 19 85 89 ac 95 4b 25 1b b5 d8 41 a1 10 c0 d9 78 70 41 a6 e2 fa 19 16 58 c6 49 ed 4a 5e 73 8e 77 14 69 82 96 97 74 b3 d7 d0 0c e2 34 d1 5f 32 01 42 54 52 00 9d 96 35 05 ab de c9 1e 3a 46 73 15 66 3b 78 25 0d a2 b8 b0 ea f1 Data Ascii: xI8ZiK%AxpAXIJ^swit4_2BTR5:Fsf;x%I:Pwg M$ kI:f2~dvEKBLh3lNb.7X"MdzumJzlYGx3y{EoA-z,TS!H.F5Bj
Oct 13, 2024 18:06:58.449815035 CEST	42	IN	Data Raw: f6 ec b5 a7 e1 cc ba 3b b8 b3 f6 5b 4f c3 9f a5 77 a1 fc a5 ab 31 cb be f5 38 e8 3b 74 5f 9f fe f2 0f 28 f7 17 58 10 11 00 00 Data Ascii: ;[Ow18;t_(X

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49751	47.76.171.224	80	2136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 18:06:57.561289072 CEST	333	OUT	GET /assets/index.4d461f36.js HTTP/1.1 Host: account-update-amazon-gift-card-collection.9d6ihdz43.top Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 18:06:58.503365993 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:06:58 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Fri, 11 Oct 2024 08:41:34 GMT ETag: "1a4a-6242f74542b80-gzip" Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2536 Content-Type: text/javascript Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 59 5b 77 d3 48 12 7e df 5f 21 7a 39 8c 74 b6 ad c4 81 5c 50 8e c6 4b 02 cc 04 98 c0 70 9d c1 e3 35 6d a9 6c 75 22 a9 85 d4 b2 63 8c ff fb 56 b7 5a 96 9c d8 81 b3 cb bc b8 a4 be d4 f5 ab ea 6a 99 27 99 c8 e5 22 b4 58 61 3d a7 17 8a 64 f4 52 91 8f 34 52 64 4a 85 22 09 0d 14 39 a3 4c 91 82 c6 74 aa 1e 52 5a 2a 22 a8 54 e4 0d 9d 28 c2 e9 4c 91 9c a6 8a bc a5 5c 91 80 26 8a bc a0 63 45 66 14 14 19 d2 4c 91 0f f4 b3 22 cf 68 a1 c8 2f f4 4a 91 5f e9 50 91 df 97 e3 5c 24 c4 dd e1 69 08 57 6e 77 f4 70 0f 0e 0f 03 f7 a2 20 c7 bc 52 5e af fb 83 9e 28 f2 67 c5 0a a0 de 76 22 a4 14 89 bb 7f 74 04 f7 1f 8c bb 37 f6 15 ab 95 33 96 a7 ee de e1 83 bd 2e ae d5 eb 02 91 16 d2 12 e0 2f 82 98 15 85 47 70 40 32 9e 42 4e 96 54 36 c3 52 64 9d f6 14 6b a6 ca 02 f2 4e 2c 26 3c c5 f1 b8 19 57 c2 3a 23 71 85 a3 29 8e 16 72 1e 83 b7 20 09 cb 71 69 27 86 b1 24 1e e9 ee 67 b8 60 49 f9 26 7e 66 77 8e 73 63 91 7b 84 65 43 48 18 8f 09 35 4b 59 07 c7 93 4e cc 46 10 e3 c2 b2 61 c2 82 40 94 a9 ec f0 74 [TRUNCATED] Data Ascii: Y[wH~_!z9t\PKp5mlu"cVZj'"Xa=dR4RdJ"9LtRZ"T(L\&cEfL"h/J_P\$iWnwp R^(gv"t73./Gp@2BNT6RdkN,&<W:#q)r qi'$g`I&~fwsc{eCH5KYNFa@t,p&kylqW\|<At2@gr*kFI4isH i7mE!qKN"%hP@&8j+66({c0j{& ;NOpNm%)))R=3vo>"0exDMYfEwqUG^5FHV3_./g/:w;ag/{@zB3~&P=,l^\|z-$e&8=-YkBy.zbNYuu5$!W>!=4k.DxV0,hxjKWLJ(&[+,\|aEt\WugInrR< suwLn %',OhVqSk~ULdc6cK%=Y1O RGGz+!.`
Oct 13, 2024 18:06:58.503524065 CEST	1236	IN	Data Raw: 32 6b 35 d5 35 80 9f f8 8f 6d cc f5 11 66 c0 e4 de bd 95 38 9e f9 08 b2 91 3d 71 ea cc 00 9f cd 18 47 0a f5 22 e7 b8 66 0c 6e 82 01 40 f0 62 8e 16 05 d6 a9 37 08 50 8d 65 90 67 12 12 9b 98 f1 33 d4 4e 8d 9a 17 67 33 22 7a e0 ca 39 96 62 34 35 87 Data Ascii: 2k55mf8=qG"fn@b7Peg3Ng3"z9b45)\|_&@fg#wUYYD"c2Jk0gUxSOEXgk. @=IoKXT(O")f./8"02\|?{1kj76*j9RY2
Oct 13, 2024 18:06:58.503540039 CEST	378	IN	Data Raw: c5 d3 3a 29 0c 58 6e 7c 14 5b a1 f6 62 53 9d 11 f6 2f 4e 9d 98 08 9d 5a ca 3a f3 ee b7 99 bf da cc fc d7 16 f3 26 01 2a c7 4f db 47 51 83 4f b8 c2 01 f5 99 0c ab 64 92 c9 26 eb a0 bf 57 61 6f 4f 57 b7 d5 57 1e f3 e0 a8 93 e5 1c 30 13 54 18 7b 95 Data Ascii: :)Xn\|[bS/NZ:&*OGQOd&WaoOWW0T{W;a%83`]b\|j+t-kO5E52TStm(@%zl}I9<s;N3,R{,\|ON8;"e1N@w}6IQwbDf%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49752	47.76.171.224	80	2136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 18:06:57.562527895 CEST	332	OUT	GET /assets/warn.2742188e.js HTTP/1.1 Host: account-update-amazon-gift-card-collection.9d6ihdz43.top Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 18:06:58.472671032 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:06:58 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Fri, 11 Oct 2024 08:41:34 GMT ETag: "1505-6242f74542b80-gzip" Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3883 Content-Type: text/javascript Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 57 c7 ce c4 46 72 be fb 29 16 7b a5 01 e6 64 61 0f 4c c3 38 cc 69 78 31 98 87 39 47 c3 ef 6e fe 92 b0 92 d6 be 9a 40 63 9a c5 9a ca 5d f5 75 3a f4 cb fa 37 e6 1f 7f cf e2 35 fe 8f aa 8b cb 1c 1c fb f2 97 24 5e 72 02 fb 77 90 ae 41 8c 61 2c a7 89 14 bb 64 58 c6 62 9e b7 e7 97 e1 41 e4 e0 04 86 69 44 f6 94 1d e1 f9 22 d8 72 f0 b2 3d ff 65 97 be c8 7a cf 62 9e bd 17 be 4e 2f 78 7d cb e7 db e7 23 39 65 29 b2 43 2b 9d 9e 2f bb c2 57 71 9a 59 ab 30 58 64 a9 db e0 df 8b 7e 95 ab 56 2d 2c 57 0e 2a 5f 42 86 78 32 96 78 41 ad cc c9 ab e6 40 fb b3 56 fd 82 7e f6 bf 2d f7 57 3a fc cf f7 7f 59 fa 9f df 0b 90 61 58 41 66 64 86 29 99 37 2b 58 0c 27 58 02 2f 58 12 78 32 4c fa 78 c6 31 e5 fb 37 1f ff f4 b0 87 20 3e f4 17 c7 b8 3f 7c f8 e3 34 cb 1c 32 cb 31 a9 fc d0 19 e6 f8 8d 8d 61 64 9e 65 85 93 b5 3e 92 50 fd 78 2b 54 96 a7 78 69 64 da c2 69 f9 f2 fd 78 1b 0b c1 f1 51 1d 8a d7 ab 63 07 05 86 5d 7e f4 71 cc f1 44 f0 5f d4 b2 96 25 b2 c7 9b 03 29 eb c7 da c7 68 81 67 ac 94 67 0e 8b [TRUNCATED] Data Ascii: WFr){daL8ix19Gn@c]u:75$^rwAa,dXbAiD"r=ezbN/x}#9e)C+/WqY0Xd~V-,W_Bx2xA@V~-W:YaXAfd)7+X'X/Xx2Lx17 >?\|421ade>Px+TxidixQc]~qD_%)hgg],.a?2 #U%`XuR1\|-h@;UaG_mSrWQRXRL`i" GcQ38t]O!o5w^"0%;Ca)<6m+P6$oH!WII8E-+fC}IQVx!'_jDzR6tB(%)RGnHZ$xGd2}J3DR;bT1Ep7oR@Zpf0_Pz.0/(RKnkAtZA!Vs3!SGD5}.T"%mIVN{[_m)HfD<uY#OC\|wSazq5EMdqSd[zj<sbF
Oct 13, 2024 18:06:58.472717047 CEST	224	IN	Data Raw: e4 b6 e5 63 df b1 b7 e2 bb 52 6b 82 a4 6b 8e 56 3e 0f 99 94 d8 d7 c2 70 eb ab 9f cd c2 71 f7 79 09 b1 31 15 2f 84 87 86 7b 8f f3 f9 14 25 c5 83 f3 0e 73 8c 2e 51 76 19 f5 b7 1e 86 3e 17 2d 06 a9 b4 bf 74 92 c5 81 88 ff 24 69 f8 26 15 fc 23 1d 22 Data Ascii: cRkkV>pqy1/{%s.Qv>-t$i&#"%'&0MWUYf)x63*K1+v=7+g~:Hn#K x`zjO"Ba;8.e,d\|]ez>
Oct 13, 2024 18:06:58.472729921 CEST	1236	IN	Data Raw: e0 5c b7 dd 90 2a 24 d0 e0 e7 7e 37 70 9a d9 77 18 50 89 86 7b 70 cf 12 f0 9c cf 0e 7e d7 b5 72 ac 72 97 e0 13 f1 78 bc 6b af 8c d4 3e 4d 36 ee ef 62 61 73 ff 74 3c ac ad 17 07 f0 e7 54 cb 0b 22 9c 54 4d 9f 35 7e 72 c6 ba 17 19 bd e7 c9 ae 27 be Data Ascii: \$~7pwP{p~rrxk>M6bast<T"TM5~r';$u_2-_>2ggNBh7r$H@+@OH][3P:v#P3NJsH\|\=ADMc*J
Oct 13, 2024 18:06:58.472778082 CEST	1236	IN	Data Raw: 68 64 a3 9e 6d e9 11 6f 1e 55 7e 83 64 9a 90 e1 ad 42 54 3b ec f5 87 4c d8 30 d8 7c ae bb f6 0f 4b 90 6d 00 a7 36 2f f6 97 c5 6b dc 7d cc a1 c5 2c b1 00 5c 6d 3d b2 9f d9 b0 4c be a3 3b c6 84 f7 e6 1d 5e 6f d5 e8 22 97 40 f6 a9 69 b6 75 42 15 c5 Data Ascii: hdmoU~dBT;L0\|Km6/k},\m=L;^o"@iuBx/U\]ha]wV;{4rjquR#$L6bj(__zTeb,1]-t+y,6Hq3H~WnV1Kpd]R
Oct 13, 2024 18:06:58.472791910 CEST	265	IN	Data Raw: be af a7 77 59 43 94 e9 8a 08 3e 91 69 aa 69 90 0e 54 3b 65 8d 49 1c 02 5f 02 ea 70 8c b8 6b f7 08 97 ea e2 18 fd 24 f6 e2 da 31 ad 97 dd 4c 9c 8d 2c 80 a8 df 2b d9 bd 15 50 e1 b6 d0 a9 d0 21 85 1e e0 f0 99 b9 06 6c 60 90 21 c2 0d 0a 81 a6 18 46 Data Ascii: wYC>iiT;eI_pk$1L,+P!l`!F,Os#fq`=T?OL@4A!RK<2va_''f ,_Hp?85.$q3?gQp#x:)VAI{/9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49754	47.76.171.224	80	2136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 18:06:58.677081108 CEST	320	OUT	GET /favicon.ico HTTP/1.1 Host: account-update-amazon-gift-card-collection.9d6ihdz43.top Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 18:06:59.588741064 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:06:59 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Sun, 13 Oct 2024 08:38:13 GMT ETag: "4486-62457a41297c1-gzip" Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 2480 Content-Type: image/x-icon Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 9b 4f 68 1f 45 14 c7 a7 fc d2 96 82 87 60 2f 01 6d cc a1 a5 56 10 da 1e 04 0f d6 62 1b 11 bc b4 d2 f4 5c 0b b6 de 84 8a 45 10 a4 88 46 11 84 84 fe 01 41 88 2d 48 72 b0 9a da 83 15 db 34 10 11 9a b6 44 a4 c5 a4 01 ed a1 49 b1 d0 3f 34 5a b4 4a c6 fd fc 66 e7 b7 b3 b3 33 bb fb fb ed 6e 7e 17 bf f0 b2 bf dd ec cc bc 79 f3 66 e6 bd 79 6f 85 58 26 3a c4 c6 8d 22 b8 f6 88 91 75 42 bc 28 84 e8 e9 09 ef 3b 85 b8 13 3c eb ea 52 f7 1f ad 12 e2 d8 33 42 74 76 aa fb d7 3b 84 e8 de 2a c4 93 41 99 a0 0a b1 47 a8 e7 e0 d0 3a 91 0b 52 ca de 80 3e 0d e8 52 40 0b b2 7d b8 17 f2 70 38 a0 e7 73 f0 bd 36 a0 f1 36 f2 9b 85 6f 03 ea f6 f0 fe 82 2c 20 eb 5f ee 4a f9 fd 0d 29 07 ae 4a 39 18 d0 81 49 29 77 8c 49 f9 de 94 ba 1f 9a 91 f2 e2 2d 29 ef 3f 2c dc 87 db 01 3d 6b f1 fe b4 54 63 d5 14 ce ce 29 3e 57 9f 94 52 8c 84 34 ac 69 51 5d 63 cf d4 fd 96 33 aa 9f d3 4d b7 d8 40 20 09 b9 d6 e0 ff 52 de 82 c8 8f b6 57 7f 19 e7 29 f6 7b c4 d3 07 bb 2f c3 aa 2f 5f 5d 6f a9 0f e7 42 de 77 e6 e5 7b 50 [TRUNCATED] Data Ascii: OhE`/mVb\EFA-Hr4DI?4ZJf3n~yfyoX&:"uB(;<R3Btv;*AG:R>R@}p8s66o, _J)J9I)wI-)?,=kTc)>WR4iQ]c3M@ RW){//_]oBw{P=aG_L1n?RBHLv1h@RgN9-&mXUyIKN sO1}W_{ya6~t7Z`7'v~//(CKCc}8,-i` Gs^P52ZW\T\CoZ\K<p''5;X=ang\|<Xs+Q3s%u$moVi6m,eKU7.J$O8rp./]Lq~Gc[e"9oj}N_q`aovoY{\eZw]z'S%?}vhiPt`Fz^?l8ujDv{/_n0& {/5^voen~_X.%\|S
Oct 13, 2024 18:06:59.588773966 CEST	1236	IN	Data Raw: 5d 60 4e b0 ee 20 bf 3c 7b ac af 6f ed e2 df 06 76 2a fa c5 7a 09 a1 fb f0 d6 ee fd b7 28 e8 93 bd 7f d9 6b d6 52 81 75 11 7e 4c 39 23 f7 34 f8 d7 ad a5 d3 9f a3 47 fd 36 10 fe 6b 1a e2 f6 53 72 1e 2f 85 0f 8f 2e fb d6 15 f6 35 73 bf b2 a1 d6 2a Data Ascii: ]`N <{ovz(kRu~L9#4G6kSr/.5sCS{-S[RY+g>`#oeB8?L;[idtF-Z?oN ~D{jMjGXri9^FCE*c<W'6VKZgb
Oct 13, 2024 18:06:59.588807106 CEST	319	IN	Data Raw: 7d f6 ae 6c 69 fe 29 e3 3e 3b 3b 2b 1f 3e 4c 3d 78 9b 92 6a 0f f3 82 fe 23 1b ed f3 41 dc e7 04 67 ec ec c1 13 79 0b 34 01 94 42 db 10 fa 3c bf 8c f8 c9 54 58 57 4d d9 4b d5 99 68 d4 8d 1d d6 29 54 cc 48 db 61 5b 3b bc 36 18 f9 05 cd c4 b5 1f 84 Data Ascii: }li)>;;+>L=xj#Agy4B<TXWMKh)THa[;6e(O7W>eo\|YB~mR>OAlA;c]Qgkd>%25gwBxeL/sUFW OL/8070l'&w7&zXo?g:(

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49741	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:06:54 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-13 16:06:55 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=175121 Date: Sun, 13 Oct 2024 16:06:54 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49742	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:06:55 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-13 16:06:56 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=175060 Date: Sun, 13 Oct 2024 16:06:56 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-13 16:06:56 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.4	49765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:43 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:43 UTC	540	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:43 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Sat, 12 Oct 2024 04:31:01 GMT ETag: "0x8DCEA76AD821850" x-ms-request-id: 5e3cf53f-d01e-007a-3ba0-1cf38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160743Z-17db6f7c8cfvtw4hh2496wp8p800000003mg000000004bq8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:43 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-13 16:07:43 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-13 16:07:43 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-13 16:07:44 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-13 16:07:44 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-13 16:07:44 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-13 16:07:44 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-13 16:07:44 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-13 16:07:44 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-13 16:07:44 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.4	49767	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:45 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:45 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:45 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: a65062bf-401e-00ac-0ea3-1b0a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160745Z-17db6f7c8cfgqlr45m385mnngs00000003m000000000e79y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:45 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.4	49769	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:45 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:45 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:45 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: b913ea27-a01e-0002-1718-1c5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160745Z-17db6f7c8cffhvbz3mt0ydz7x400000003d0000000001xbm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:45 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.4	49770	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:45 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:45 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:45 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 695c64e8-001e-0034-5de7-1add04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160745Z-17db6f7c8cfbd7pgux3k6qfa6000000004400000000001mq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:45 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.4	49768	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:45 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:45 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:45 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 3735e006-a01e-006f-3de4-1a13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160745Z-17db6f7c8cfqkqk8bn4ck6f72000000004sg00000000g9ku x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:45 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.4	49766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:45 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:45 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:45 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: d08e5818-a01e-003d-3417-1c98d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160745Z-17db6f7c8cfmhggkx889x958tc000000025g00000000h5qb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:45 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.4	49772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:46 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:46 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:46 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 6c20420a-501e-008f-0947-1c9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160746Z-17db6f7c8cfcrfgzd01a8emnyg00000002k000000000by22 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:46 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.4	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:46 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:46 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:46 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: a417ae39-101e-008e-1f1c-1bcf88000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160746Z-17db6f7c8cfspvtq2pgqb2w5k0000000052g000000002ppz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:46 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.4	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:46 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:46 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:46 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 7bd6ade2-501e-008f-3ee2-1b9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160746Z-17db6f7c8cfgqlr45m385mnngs00000003r0000000005m1e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:46 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.4	49771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:46 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:46 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:46 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 6aeebda2-001e-008d-31ea-1ad91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160746Z-17db6f7c8cfspvtq2pgqb2w5k0000000053g0000000005g2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:46 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.4	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:46 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:46 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:46 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 0e59abf9-f01e-003c-2b47-1c8cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160746Z-17db6f7c8cf9c22xp43k2gbqvn00000002s0000000008d0f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:46 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	49776	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:46 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:46 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:46 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: c9e2a668-e01e-001f-5fd7-1a1633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160746Z-17db6f7c8cfhzb2znbk0zyvf6n00000004t0000000009p93 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:46 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	49777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:46 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:46 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:46 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: bef1d05a-c01e-0034-2ea3-1b2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160746Z-17db6f7c8cfwtn5x6ye8p8q9m000000003tg0000000017zm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:46 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:46 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:46 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:46 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: cbdfa3b4-e01e-0051-2293-1c84b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160746Z-17db6f7c8cfcl4jvqfdxaxz9w800000002dg00000000cnzv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:46 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:46 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:46 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:46 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 458f517b-301e-000c-2fe6-1a323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160746Z-17db6f7c8cfbr2wt66emzt78g400000004qg0000000054nz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:46 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:46 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:46 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:46 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: e456ac6c-b01e-0097-6bbf-1a4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160746Z-17db6f7c8cf5mtxmr1c51513n000000005dg000000000g32 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:46 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:47 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:47 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:47 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 298ef280-e01e-0020-085c-1dde90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160747Z-17db6f7c8cf4g2pjavqhm24vp400000005c0000000004p50 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:47 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:47 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:47 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:47 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: eb753988-701e-0021-591f-1c3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160747Z-17db6f7c8cfcrfgzd01a8emnyg00000002r0000000001ua7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:47 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:47 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:47 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:47 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 0c32318b-701e-0098-6762-1c395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160747Z-17db6f7c8cf6f7vv3recfp4a6w000000022g00000000fhx0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:47 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:47 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:47 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:47 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 55879866-201e-0033-5b1c-1cb167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160747Z-17db6f7c8cfcl4jvqfdxaxz9w800000002m0000000003nck x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:47 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:47 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:47 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:47 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 5355bdce-701e-0021-10ea-1a3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160747Z-17db6f7c8cfspvtq2pgqb2w5k000000004zg0000000095ym x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:47 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:48 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:48 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:48 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 94304cac-901e-0048-809f-1bb800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160748Z-17db6f7c8cf9wwz8ehu7c5p33g00000002f0000000002mk6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:48 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:48 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:48 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:48 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 11c3f343-501e-0078-0139-1c06cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160748Z-17db6f7c8cf9wwz8ehu7c5p33g00000002fg000000002f31 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:48 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:48 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:48 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:48 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: a5b27f46-b01e-003d-5a47-1cd32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160748Z-17db6f7c8cfmhggkx889x958tc000000029000000000a64u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:48 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:48 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:48 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:48 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: ec733f58-401e-0035-529c-1b82d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160748Z-17db6f7c8cfcl4jvqfdxaxz9w800000002g00000000094e5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:48 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:48 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:48 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:48 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 6fc17292-101e-0034-6b4a-1c96ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160748Z-17db6f7c8cfwtn5x6ye8p8q9m000000003pg000000008ye8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:48 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:49 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:49 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:49 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 483006ab-801e-0035-465b-1c752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160749Z-17db6f7c8cfcrfgzd01a8emnyg00000002mg0000000097gb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:49 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:49 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:49 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:49 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 1f04dcaf-901e-00ac-4307-1cb69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160749Z-17db6f7c8cfvtw4hh2496wp8p800000003dg00000000hrxu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:49 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:49 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:49 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:49 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 1507c9f1-d01e-007a-72eb-1af38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160749Z-17db6f7c8cf96l6t7bwyfgbkhw000000046g000000003xv2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:49 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:49 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:49 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:49 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: b368a101-001e-005a-6f1e-1bc3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160749Z-17db6f7c8cfbr2wt66emzt78g400000004sg000000000mza x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:49 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:49 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:49 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:49 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 7708100b-601e-003e-5be1-1a3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160749Z-17db6f7c8cfbd7pgux3k6qfa6000000003y000000000bz5d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:49 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:49 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:50 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:49 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 574f47a0-001e-0028-2c81-1bc49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160749Z-17db6f7c8cfhrxld7punfw920n00000003zg0000000001gb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:50 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:49 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:50 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:50 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 30f6abec-501e-005b-072b-1ad7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160750Z-17db6f7c8cfwtn5x6ye8p8q9m000000003sg000000003m5a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:50 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:50 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:50 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:50 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 69483ed4-001e-0034-56df-1add04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160750Z-17db6f7c8cf6qp7g7r97wxgbqc00000004c000000000d1h0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:50 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:50 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:50 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:50 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 32ce2fe1-701e-001e-0917-1cf5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160750Z-17db6f7c8cfwtn5x6ye8p8q9m000000003tg00000000181t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:50 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:50 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:50 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:50 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: d28b635f-001e-0079-686d-1c12e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160750Z-17db6f7c8cfcrfgzd01a8emnyg00000002ng000000007hqm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:50 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:50 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:50 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:50 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 49fa3939-001e-0017-20cd-1a0c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160750Z-17db6f7c8cf96l6t7bwyfgbkhw000000042000000000dbb0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:50 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:50 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:50 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:50 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: e8d3a0af-c01e-0014-0c1c-1ca6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160750Z-17db6f7c8cfcrfgzd01a8emnyg00000002hg00000000d41c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:50 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:50 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:50 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:50 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 38f28e88-001e-0046-4a22-1bda4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160750Z-17db6f7c8cfhzb2znbk0zyvf6n00000004s000000000bx5t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:50 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:50 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:50 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:50 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: e9bc8845-c01e-008d-06d9-1a2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160750Z-17db6f7c8cfqxt4wrzg7st2fm8000000057g0000000079ag x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:50 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:50 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:50 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:50 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: eba22146-701e-0021-1f31-1c3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160750Z-17db6f7c8cf9wwz8ehu7c5p33g00000002a000000000e15a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:50 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:51 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:51 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:51 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 72dafb48-001e-0079-44ea-1a12e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160751Z-17db6f7c8cf6qp7g7r97wxgbqc00000004b000000000cy79 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:51 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:51 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:51 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:51 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: b2260943-f01e-0052-0b1c-1c9224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160751Z-17db6f7c8cfvq8pt2ak3arkg6n0000000360000000002chq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:51 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:51 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:51 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:51 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 355a979e-401e-0064-3e4a-1c54af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160751Z-17db6f7c8cf6f7vv3recfp4a6w000000021g00000000fgp2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:51 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:51 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:51 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:51 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 9ba87e07-d01e-008e-2ae9-1a387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160751Z-17db6f7c8cf96l6t7bwyfgbkhw000000042000000000dbck x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:51 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:51 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:51 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:51 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: aaeb8d2a-d01e-0065-26e8-1bb77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160751Z-17db6f7c8cfgqlr45m385mnngs00000003k000000000enu5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:51 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:52 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:52 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:52 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 77f86656-001e-000b-08e7-1a15a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160752Z-17db6f7c8cfp6mfve0htepzbps00000004f000000000bsex x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:52 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:52 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:52 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:52 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 24993946-c01e-008e-55d7-1a7381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160752Z-17db6f7c8cfhzb2znbk0zyvf6n00000004tg000000009bhh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:52 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:52 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:52 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:52 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 4508f1f3-f01e-0096-78e2-1a10ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160752Z-17db6f7c8cfhzb2znbk0zyvf6n00000004ug0000000062h5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:52 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:52 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:52 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:52 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 61c06469-601e-0001-0ce6-1cfaeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160752Z-17db6f7c8cfmhggkx889x958tc000000027000000000dc1g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:52 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:52 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:52 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:52 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: bf053e75-701e-000d-6f20-1b6de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160752Z-17db6f7c8cfbr2wt66emzt78g400000004m000000000awrb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:52 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:53 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:53 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:53 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 6dd9b2f2-501e-0035-4e87-1bc923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160753Z-17db6f7c8cfhrxld7punfw920n00000003z0000000001a05 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:53 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:53 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:53 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:53 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: ec734971-401e-0035-389c-1b82d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160753Z-17db6f7c8cf96l6t7bwyfgbkhw000000046g000000003xx9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:53 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:53 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:53 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:53 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 90f8132d-901e-002a-0d47-1c7a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160753Z-17db6f7c8cffhvbz3mt0ydz7x400000003cg000000002hpb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:53 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:53 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:53 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:53 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 5f60e048-c01e-00ad-7b18-1ca2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160753Z-17db6f7c8cf8rgvlb86c9c00980000000390000000004f9b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:53 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49822	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:53 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:53 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:53 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 8f8e431e-b01e-0097-6fac-1b4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160753Z-17db6f7c8cfwtn5x6ye8p8q9m000000003q0000000008h1x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:53 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:53 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:53 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:53 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: a45e7bac-201e-003c-72f3-1a30f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160753Z-17db6f7c8cfp6mfve0htepzbps00000004gg000000009uvv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:53 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:53 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:53 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:53 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: d286cfb1-001e-0079-076b-1c12e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160753Z-17db6f7c8cfmhggkx889x958tc00000002bg000000004952 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:53 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:53 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:54 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:53 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 9a6afd11-d01e-0049-3e83-1be7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160753Z-17db6f7c8cfhrxld7punfw920n00000003ug00000000ax1e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:54 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:53 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:54 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:53 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 23e49b38-a01e-001e-1147-1c49ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160753Z-17db6f7c8cfcl4jvqfdxaxz9w800000002m0000000003nh9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:54 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:53 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:54 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:53 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 9aad704f-d01e-0049-789c-1be7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160753Z-17db6f7c8cfq2j6f03aq9y8dns00000004bg000000006g4w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:54 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:54 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:55 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:54 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 90b8fb57-901e-002a-182e-1c7a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160754Z-17db6f7c8cf9c22xp43k2gbqvn00000002pg00000000d0ty x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:55 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:54 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:55 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:54 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: d2b2f6f8-f01e-0085-0622-1c88ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160754Z-17db6f7c8cf6f7vv3recfp4a6w000000024g00000000b0f6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:55 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49831	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:54 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:55 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:54 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: cda1fd3a-301e-0096-2fde-1ae71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160754Z-17db6f7c8cfq2j6f03aq9y8dns00000004b0000000006yf0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:55 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:54 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:55 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:54 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: c0a86c07-d01e-007a-0a2f-1cf38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160754Z-17db6f7c8cfpm9w8b1ybgtytds0000000350000000000p84 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:55 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:54 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:55 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:54 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 94508d5b-e01e-0052-6824-1ad9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160754Z-17db6f7c8cfvzwz27u5rnq9kpc00000005eg000000006ter x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:55 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49833	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:55 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:55 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:55 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 24028bf8-401e-00a3-4b1c-1c8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160755Z-17db6f7c8cf6f7vv3recfp4a6w0000000250000000008w6z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:55 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:55 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:55 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:55 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 581fb33a-501e-00a0-339b-1b9d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160755Z-17db6f7c8cfmhggkx889x958tc000000025g00000000h62e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:55 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:55 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:55 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:55 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 1c70dbaf-401e-000a-0f1b-1c4a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160755Z-17db6f7c8cfvq8pt2ak3arkg6n000000035g00000000469w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:55 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49835	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:55 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:55 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:55 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 69457385-001e-0034-42de-1add04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160755Z-17db6f7c8cfvzwz27u5rnq9kpc00000005h000000000103p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:55 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:55 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:55 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:55 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 4a3f7a17-001e-0017-5de5-1a0c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160755Z-17db6f7c8cf4g2pjavqhm24vp400000005dg000000001tg0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:55 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:56 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:56 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:56 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 959f4817-801e-0078-5157-1cbac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160756Z-17db6f7c8cfcl4jvqfdxaxz9w800000002kg0000000048wx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:56 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:56 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:56 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:56 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: a41636a0-e01e-0051-20e2-1a84b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160756Z-17db6f7c8cfhzb2znbk0zyvf6n00000004ug0000000062rg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:56 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:56 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:56 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:56 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 36d40921-f01e-0085-6daa-1c88ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160756Z-17db6f7c8cfcrfgzd01a8emnyg00000002gg00000000e3ch x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:56 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:56 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:56 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:56 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 103aeaae-201e-0051-661c-1c7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160756Z-17db6f7c8cfvq8pt2ak3arkg6n000000032000000000bc4d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:56 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:56 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:56 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:56 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 0588c624-801e-0048-72e0-1af3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160756Z-17db6f7c8cf5mtxmr1c51513n0000000057g00000000dfp3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:56 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:57 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:57 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:57 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 94afa4f1-501e-0047-0aca-1ace6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160757Z-17db6f7c8cfnqpbkckdefmqa44000000057g0000000019cw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:57 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:57 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:57 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:57 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 7dbe029a-c01e-007a-2397-1bb877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160757Z-17db6f7c8cfq2j6f03aq9y8dns00000004a0000000008ad3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:57 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:57 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:57 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:57 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 35556aea-401e-0064-3048-1c54af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160757Z-17db6f7c8cfwtn5x6ye8p8q9m000000003ng00000000bxa5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:57 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:57 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:57 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:57 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: e5b5a791-201e-0071-25a3-1bff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160757Z-17db6f7c8cfhrxld7punfw920n00000003w0000000007qcd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:57 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:57 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:57 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:57 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 2eee43c6-d01e-0066-0203-1bea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160757Z-17db6f7c8cfqkqk8bn4ck6f72000000004t000000000e81s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:57 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:58 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:58 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:58 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: c154ba59-a01e-0070-01d7-1a573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160758Z-17db6f7c8cfbd7pgux3k6qfa6000000004400000000001v8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:58 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:58 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:58 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:58 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 46e4659a-701e-000d-2947-1c6de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160758Z-17db6f7c8cfjxfnba42c5rukwg0000000250000000003ev6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:58 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:58 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:58 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:58 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: defb5908-e01e-0033-2de2-1a4695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160758Z-17db6f7c8cfp6mfve0htepzbps00000004ng000000000v3e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:58 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:58 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:58 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:58 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 3704a696-901e-0048-3641-1cb800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160758Z-17db6f7c8cfmhggkx889x958tc000000025g00000000h64x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:58 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:58 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:58 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:58 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: a671d058-901e-00a0-5ad6-1a6a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160758Z-17db6f7c8cfhzb2znbk0zyvf6n00000004wg0000000021cq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:58 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:58 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:59 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:59 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 07ebf894-801e-008c-19d8-1a7130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160759Z-17db6f7c8cf6qp7g7r97wxgbqc00000004d000000000b551 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:59 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:58 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:59 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:59 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: e6504dd7-401e-0015-6cce-1a0e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160759Z-17db6f7c8cfhrxld7punfw920n00000003s000000000g9ar x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:59 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:59 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:59 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:59 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 07f85e87-a01e-003d-78df-1a98d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160759Z-17db6f7c8cfspvtq2pgqb2w5k000000005100000000069n7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:59 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:59 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:59 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:59 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: f0eac77b-f01e-00aa-541b-1c8521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160759Z-17db6f7c8cfmhggkx889x958tc000000027g00000000cr4e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:59 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:59 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:07:59 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:07:59 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: d1236033-501e-008f-33ea-1a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160759Z-17db6f7c8cf6qp7g7r97wxgbqc00000004fg000000006565 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:07:59 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:07:59 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:00 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:00 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 745fe90a-101e-005a-7f69-1c882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160800Z-17db6f7c8cfmhggkx889x958tc00000002ag000000006pmh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:00 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:00 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:00 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:00 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 3f82dd78-601e-005c-4797-1bf06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160800Z-17db6f7c8cfbd7pgux3k6qfa6000000003wg00000000ftnn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:00 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:00 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:00 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:00 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: a2b1ec5b-001e-002b-54a3-1b99f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160800Z-17db6f7c8cf96l6t7bwyfgbkhw000000043g000000009xht x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:00 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49862	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:00 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:00 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:00 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 234b0266-801e-0035-5da3-1b752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160800Z-17db6f7c8cfcrfgzd01a8emnyg00000002r0000000001uqc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:00 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:00 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:00 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:00 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 0b054cf6-001e-00a2-745b-1cd4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160800Z-17db6f7c8cfmhggkx889x958tc00000002d00000000010um x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:00 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49865	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:00 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:00 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:00 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 73142df5-301e-0052-1d1f-1b65d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160800Z-17db6f7c8cfbr2wt66emzt78g400000004m000000000awy1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:00 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49863	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:00 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:00 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:00 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: c0002b7f-501e-0029-6e1c-1cd0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160800Z-17db6f7c8cfcl4jvqfdxaxz9w800000002f000000000a9te x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:00 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:00 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:00 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:00 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: b9bf0acf-d01e-00a1-7e1b-1c35b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160800Z-17db6f7c8cf8rgvlb86c9c0098000000034000000000dkk5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:00 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49867	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:00 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:00 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:00 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 44110a29-201e-00aa-4c81-1a3928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160800Z-17db6f7c8cfqxt4wrzg7st2fm8000000058g000000005y9y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:00 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49864	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:00 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:00 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:00 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: fe1a38a0-a01e-0053-6ad8-1a8603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160800Z-17db6f7c8cf5mtxmr1c51513n0000000057g00000000dfty x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:00 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49869	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:01 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:02 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:01 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 4ec19421-301e-006e-0147-1cf018000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160801Z-17db6f7c8cf9wwz8ehu7c5p33g00000002a000000000e1f3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:02 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49871	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:01 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:02 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:01 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 4704ee26-501e-0047-65aa-1cce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160801Z-17db6f7c8cf9wwz8ehu7c5p33g00000002e00000000059tr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:02 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49868	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:01 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:02 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:01 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: fa68fd7e-e01e-0099-0ae2-1ada8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160801Z-17db6f7c8cfq2j6f03aq9y8dns000000048000000000cde9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:02 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49872	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:01 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:02 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:01 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: aa10c15c-401e-0067-377e-1b09c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160801Z-17db6f7c8cfwtn5x6ye8p8q9m000000003r0000000006t41 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:02 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49870	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:01 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:02 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:01 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: cec5e4df-e01e-001f-1c47-1c1633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160801Z-17db6f7c8cfmhggkx889x958tc00000002ag000000006pqc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:02 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49877	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:02 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:02 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:02 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 083451f6-401e-0035-25c0-1a82d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160802Z-17db6f7c8cfvzwz27u5rnq9kpc00000005a000000000g03v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:02 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49874	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:02 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:02 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:02 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: a032a6e1-c01e-002b-15e5-1a6e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160802Z-17db6f7c8cfbr2wt66emzt78g400000004mg00000000b591 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:02 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49873	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:02 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:02 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:02 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: f4458a97-001e-0028-604a-1cc49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160802Z-17db6f7c8cfcrfgzd01a8emnyg00000002kg00000000cvfa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:02 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49875	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:02 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:02 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:02 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 5c04d847-901e-007b-6354-1cac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160802Z-17db6f7c8cfmhggkx889x958tc000000027g00000000cr7s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:02 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49876	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:02 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:02 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:02 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 03f8bcf3-701e-0098-27e6-1a395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160802Z-17db6f7c8cf4g2pjavqhm24vp4000000059g000000009u3n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:02 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49878	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:03 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:03 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:03 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 5afb0683-e01e-0052-7239-1cd9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160803Z-17db6f7c8cfcrfgzd01a8emnyg00000002r0000000001uu4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:03 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49879	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:03 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:03 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:03 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 95427c10-401e-005b-245b-1c9c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160803Z-17db6f7c8cf8rgvlb86c9c0098000000035000000000bxf3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:03 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49880	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:03 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:03 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:03 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: df344972-701e-001e-12cd-1af5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160803Z-17db6f7c8cfbd7pgux3k6qfa6000000003x000000000fge5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:03 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49882	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:03 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:03 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:03 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: c08f385d-301e-0033-1fca-1afa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160803Z-17db6f7c8cf96l6t7bwyfgbkhw000000044g000000007g4v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:03 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49881	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:03 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:03 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:03 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 842b74fa-501e-008c-2f04-1acd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160803Z-17db6f7c8cfbd7pgux3k6qfa6000000003wg00000000fts9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:03 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49884	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:04 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:04 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:04 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 03a639d1-101e-008d-40f2-1a92e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160804Z-17db6f7c8cfhzb2znbk0zyvf6n00000004vg0000000047g6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:04 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49887	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:04 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:04 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:04 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 71b03e0b-301e-0052-60b9-1c65d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160804Z-17db6f7c8cfhzb2znbk0zyvf6n00000004t0000000009q8g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:04 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49883	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:04 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:04 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:04 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: a05efbea-801e-00a3-1b29-1c7cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160804Z-17db6f7c8cfvtw4hh2496wp8p800000003gg00000000au3x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:04 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49886	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:04 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:04 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:04 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: db50f49a-301e-000c-213b-1c323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160804Z-17db6f7c8cf6f7vv3recfp4a6w000000024000000000bhu3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:04 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49885	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:04 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:04 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:04 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: c21fd998-001e-0014-4ce5-1a5151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160804Z-17db6f7c8cfbd7pgux3k6qfa6000000003y000000000bzns x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:04 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49892	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:05 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:05 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:05 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: bb1c3872-701e-0050-4447-1c6767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160805Z-17db6f7c8cfmhggkx889x958tc000000026g00000000f4qa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:05 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49889	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:05 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:05 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:05 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: ef1c8585-201e-0000-7b47-1ca537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160805Z-17db6f7c8cfjxfnba42c5rukwg000000026g0000000005b5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:05 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49888	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:05 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:05 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:05 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 91a3e2b8-d01e-008e-6716-1c387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160805Z-17db6f7c8cffhvbz3mt0ydz7x4000000039g00000000a41e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:05 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49890	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:05 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:05 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:05 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: e28c1875-001e-00ad-40e2-1a554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160805Z-17db6f7c8cfspvtq2pgqb2w5k00000000500000000008pe7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:05 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49891	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:05 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:05 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:05 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 6eea93bb-701e-0097-0521-1bb8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160805Z-17db6f7c8cfhrxld7punfw920n00000003yg00000000218c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:05 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49893	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:06 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:06 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:06 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: b9726785-901e-00ac-76d7-1ab69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160806Z-17db6f7c8cfp6mfve0htepzbps00000004hg000000006zbq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:06 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49894	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:06 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:06 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:06 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 18adff54-401e-008c-27da-1a86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160806Z-17db6f7c8cfhrxld7punfw920n00000003x0000000005ahp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:06 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49895	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:06 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:06 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:06 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 374dd3c9-a01e-006f-2dec-1a13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160806Z-17db6f7c8cfq2j6f03aq9y8dns00000004dg000000000ymg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:06 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49896	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:06 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:06 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:06 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 4ec1f56b-301e-006e-0147-1cf018000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160806Z-17db6f7c8cfcl4jvqfdxaxz9w800000002fg000000009ysr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:06 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49897	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:06 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:06 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:06 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 63590950-201e-0085-2bd8-1a34e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160806Z-17db6f7c8cfbd7pgux3k6qfa6000000003xg00000000dubq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:06 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49898	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:06 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:06 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:06 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: b05a7aca-501e-0047-5422-1cce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160806Z-17db6f7c8cf8rgvlb86c9c0098000000039g000000003nwp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:06 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49899	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:06 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:06 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:06 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 1739cac3-801e-0067-0a1c-1cfe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160806Z-17db6f7c8cfvtw4hh2496wp8p800000003fg00000000d3rg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:06 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49901	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:06 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:06 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:06 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: e4896758-501e-007b-0aba-1a5ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160806Z-17db6f7c8cfqxt4wrzg7st2fm8000000053g00000000g5xe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:06 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49900	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:06 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:07 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:06 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: 2ae22a5c-001e-0046-6b1b-1cda4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160806Z-17db6f7c8cf6f7vv3recfp4a6w000000022g00000000fn53 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:07 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49902	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:07 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:07 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:07 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: 6e61a485-701e-0097-1ff3-1ab8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160807Z-17db6f7c8cfvzwz27u5rnq9kpc00000005eg000000006tsh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:07 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49903	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:07 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:07 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:07 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: d178e097-d01e-005a-72ac-1b7fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160807Z-17db6f7c8cfcl4jvqfdxaxz9w800000002m0000000003nx5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:07 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49904	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:07 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:07 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:07 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: f593edb0-801e-0083-3a0f-1cf0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160807Z-17db6f7c8cfvq8pt2ak3arkg6n000000035g00000000471x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:07 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49906	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:07 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:07 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:07 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: 3cd1d522-f01e-0085-0847-1c88ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160807Z-17db6f7c8cfcl4jvqfdxaxz9w800000002cg00000000f43m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:07 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49905	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:07 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:07 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:07 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: bf76ff4d-e01e-0020-06e6-1cde90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160807Z-17db6f7c8cfcrfgzd01a8emnyg00000002g000000000f47s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:07 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49907	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:07 UTC	192	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:07 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:07 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: 94230e0f-f01e-0003-2847-1c4453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160807Z-17db6f7c8cf9c22xp43k2gbqvn00000002t0000000006kvm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:07 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49908	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:08 UTC	192	OUT	GET /rules/rule700900v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:08 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:08 GMT Content-Type: text/xml Content-Length: 1371 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:06 GMT ETag: "0x8DC582BED3D048D" x-ms-request-id: 6367065e-201e-0071-46d7-1aff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160808Z-17db6f7c8cf5mtxmr1c51513n0000000057g00000000dg4z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:08 UTC	1371	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6f 66 69 6e 67 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700900" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProofing" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49910	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:08 UTC	192	OUT	GET /rules/rule702250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:08 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:08 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDD0A87E5" x-ms-request-id: a71f126f-d01e-005a-1a25-1c7fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160808Z-17db6f7c8cfvtw4hh2496wp8p800000003k00000000083c4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:08 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49909	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:08 UTC	192	OUT	GET /rules/rule702251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:08 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:08 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F427E7" x-ms-request-id: 054ff9cd-601e-000d-3cf3-1a2618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160808Z-17db6f7c8cfvzwz27u5rnq9kpc00000005cg00000000bfrw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:08 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49911	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:08 UTC	192	OUT	GET /rules/rule702651v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:08 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:08 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEC600CC" x-ms-request-id: da4e3e9d-101e-0034-092e-1b96ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160808Z-17db6f7c8cfp6mfve0htepzbps00000004e000000000e98s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:08 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 65 64 69 61 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 65 64 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702651" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Media.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMedi

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49912	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:08 UTC	192	OUT	GET /rules/rule702650v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:09 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:08 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEA1B544" x-ms-request-id: 06b81cbc-d01e-0065-2ee4-1ab77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160808Z-17db6f7c8cfq2j6f03aq9y8dns00000004ag000000006spd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:09 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 65 64 69 61 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 65 64 69 61 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702650" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Media" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMedia" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49913	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:09 UTC	192	OUT	GET /rules/rule703101v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:09 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:09 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F93037" x-ms-request-id: b72af4e8-501e-008c-5083-1bcd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160809Z-17db6f7c8cfwtn5x6ye8p8q9m000000003s0000000004syb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:09 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 31 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 41 54 53 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 41 54 53 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703101" V="1" DC="SM" EN="Office.Telemetry.Event.Office.MATS.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMATS"

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	49916	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 16:08:09 UTC	192	OUT	GET /rules/rule702901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 16:08:09 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 16:08:09 GMT Content-Type: text/xml Content-Length: 1411 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE53FACDA" x-ms-request-id: fdc668b8-001e-0079-502e-1c12e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T160809Z-17db6f7c8cfqxt4wrzg7st2fm800000005ag000000001289 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 16:08:09 UTC	1411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 61 6e 61 67 65 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Manageability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantT

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 6112, Parent PID: 480

General

Target ID:	0
Start time:	12:06:45
Start date:	13/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 2136, Parent PID: 6112

General

Target ID:	2
Start time:	12:06:46
Start date:	13/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2292 --field-trial-handle=2204,i,11017439816736766845,16285686206145544316,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6308, Parent PID: 480

General

Target ID:	3
Start time:	12:06:49
Start date:	13/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://account-update-amazon-gift-card-collection.9d6ihdz43.top/"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://account-update-amazon-gift-card-collection.9d6ihdz43.top/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 49

Chrome Cache Entry: 50

Chrome Cache Entry: 51

Chrome Cache Entry: 52

Chrome Cache Entry: 53

Chrome Cache Entry: 54

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTP Packets

HTTPS Proxied Packets

Statistics

CPU Usage

Windows Analysis Report
http://account-update-amazon-gift-card-collection.9d6ihdz43.top/