Edit tour

Windows Analysis Report
http://josecarlosrevoredo.com/

Overview

General Information

Sample URL:	http://josecarlosrevoredo.com/
Analysis ID:	1540660
Tags:	urlscan
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

HTML page contains hidden javascript code

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1012 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4092 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2088 --field-trial-handle=1952,i,3103678846888593772,11420615675697811035,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6384 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://josecarlosrevoredo.com/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: http://josecarlosrevoredo.com/

HTTP Parser: Base64 decoded: <svg fill='#D7D7D7' style="float: right" xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Source: http://josecarlosrevoredo.com/	HTTP Parser: No favicon
Source: http://josecarlosrevoredo.com/	HTTP Parser: No favicon
Source: http://josecarlosrevoredo.com/	HTTP Parser: No favicon
Source: http://josecarlosrevoredo.com/privacy.html	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49772 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://josecarlosrevoredo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=bucket007%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet09_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fjosecarlosrevoredo.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MTk3YzNiMjY4YTd8fHwxNzI5NzIzNDUxLjE4OTR8ZTM5ZmQ1Yzk3ZDdiZTc3NmQzY2U5ODRkMGRmOTBlNWU3ZDk3YTVmMHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDdlNzNmNWYzNDEzZGI1NTkwMGQ0ZWM1Y2NiZWYxODkzZTYyNmFkZjR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fA%253D%253D&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2192083245873568&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301542%2C17301266%2C72717107&format=r3%7Cs&nocache=9961729723453569&num=0&output=afd_ads&domain_name=josecarlosrevoredo.com&v=3&bsl=8&pac=2&u_his=1&u_tz=-240&dt=1729723453572&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=789&frm=0&uio=--&cont=tc&drt=0&jsid=caf&nfp=1&jsv=688160506&rurl=http%3A%2F%2Fjosecarlosrevoredo.com%2F HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://josecarlosrevoredo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?pac=2 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?pac=2 HTTP/1.1Host: syndicatedsearch.googConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: josecarlosrevoredo.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track.php?domain=josecarlosrevoredo.com&toggle=browserjs&uid=MTcyOTcyMzQ1MS4xNTg6NWNhZGExMWVmMjVjNmRmNWE1ODY2NTY2MmRhODIyZDg4ZmM2NTEzN2JjZjM3MGI2MzU1YzAxNTc4MTg0YTc1OTo2NzE5N2MzYjI2OTA5 HTTP/1.1Host: josecarlosrevoredo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://josecarlosrevoredo.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1Host: d38psrni17bvxu.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://josecarlosrevoredo.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ls.php?t=67197c3b&token=7e73f5f3413db55900d4ec5ccbef1893e626adf4 HTTP/1.1Host: josecarlosrevoredo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://josecarlosrevoredo.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track.php?domain=josecarlosrevoredo.com&toggle=browserjs&uid=MTcyOTcyMzQ1MS4xNTg6NWNhZGExMWVmMjVjNmRmNWE1ODY2NTY2MmRhODIyZDg4ZmM2NTEzN2JjZjM3MGI2MzU1YzAxNTc4MTg0YTc1OTo2NzE5N2MzYjI2OTA5 HTTP/1.1Host: josecarlosrevoredo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1Host: d38psrni17bvxu.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy.html HTTP/1.1Host: josecarlosrevoredo.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Referer: http://josecarlosrevoredo.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: josecarlosrevoredo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://josecarlosrevoredo.com/privacy.htmlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: josecarlosrevoredo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=d0ca61f97155fcbe:T=1729723455:RT=1729723455:S=ALNI_MbXwVlo1IwlPM5_zzullDbZJuFGCw
Source: global traffic	HTTP traffic detected: GET /track.php?domain=josecarlosrevoredo.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyOTcyMzQ1MS4xNTg6NWNhZGExMWVmMjVjNmRmNWE1ODY2NTY2MmRhODIyZDg4ZmM2NTEzN2JjZjM3MGI2MzU1YzAxNTc4MTg0YTc1OTo2NzE5N2MzYjI2OTA5 HTTP/1.1Host: josecarlosrevoredo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://josecarlosrevoredo.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=d0ca61f97155fcbe:T=1729723455:RT=1729723455:S=ALNI_MbXwVlo1IwlPM5_zzullDbZJuFGCw
Source: global traffic	HTTP traffic detected: GET /track.php?domain=josecarlosrevoredo.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyOTcyMzQ1MS4xNTg6NWNhZGExMWVmMjVjNmRmNWE1ODY2NTY2MmRhODIyZDg4ZmM2NTEzN2JjZjM3MGI2MzU1YzAxNTc4MTg0YTc1OTo2NzE5N2MzYjI2OTA5 HTTP/1.1Host: josecarlosrevoredo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=d0ca61f97155fcbe:T=1729723455:RT=1729723455:S=ALNI_MbXwVlo1IwlPM5_zzullDbZJuFGCw

Source: global traffic	DNS traffic detected: DNS query: josecarlosrevoredo.com
Source: global traffic	DNS traffic detected: DNS query: d38psrni17bvxu.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: syndicatedsearch.goog
Source: global traffic	DNS traffic detected: DNS query: afs.googleusercontent.com

Source: chromecache_53.2.dr, chromecache_65.2.dr, chromecache_51.2.dr, chromecache_66.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=
Source: chromecache_53.2.dr, chromecache_65.2.dr, chromecache_51.2.dr, chromecache_66.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_53.2.dr, chromecache_65.2.dr, chromecache_51.2.dr, chromecache_66.2.dr	String found in binary or memory: https://partner.googleadservices.com/gampad/cookie.js
Source: chromecache_53.2.dr, chromecache_65.2.dr, chromecache_51.2.dr, chromecache_66.2.dr	String found in binary or memory: https://syndicatedsearch.goog
Source: chromecache_53.2.dr, chromecache_65.2.dr, chromecache_51.2.dr, chromecache_66.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-conversion/16521530460/?gad_source=1&adview_type=5
Source: chromecache_53.2.dr, chromecache_65.2.dr, chromecache_51.2.dr, chromecache_66.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion/16521530460/?gad_source=1&adview_type=3

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49772 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@17/32@26/14

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2088 --field-trial-handle=1952,i,3103678846888593772,11420615675697811035,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://josecarlosrevoredo.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2088 --field-trial-handle=1952,i,3103678846888593772,11420615675697811035,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
https://syndicatedsearch.goog	0%	URL Reputation	safe
https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
josecarlosrevoredo.com	52.18.59.124	true	false	unknown
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
syndicatedsearch.goog	142.250.185.174	true	false	unknown
s-part-0036.t-0009.t-msedge.net	13.107.246.64	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
www.google.com	142.250.185.68	true	false	unknown
googlehosted.l.googleusercontent.com	142.250.181.225	true	false	unknown
d38psrni17bvxu.cloudfront.net	18.66.121.190	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
afs.googleusercontent.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true	false		unknown
http://josecarlosrevoredo.com/track.php?domain=josecarlosrevoredo.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyOTcyMzQ1MS4xNTg6NWNhZGExMWVmMjVjNmRmNWE1ODY2NTY2MmRhODIyZDg4ZmM2NTEzN2JjZjM3MGI2MzU1YzAxNTc4MTg0YTc1OTo2NzE5N2MzYjI2OTA5	false		unknown
http://josecarlosrevoredo.com/privacy.html	false		unknown
https://syndicatedsearch.goog/adsense/domains/caf.js?pac=2	false		unknown
http://josecarlosrevoredo.com/ls.php?t=67197c3b&token=7e73f5f3413db55900d4ec5ccbef1893e626adf4	false		unknown
https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff	false		unknown
https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff	false	URL Reputation: safe	unknown
http://d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png	false		unknown
http://josecarlosrevoredo.com/favicon.ico	false		unknown
http://josecarlosrevoredo.com/	false		unknown
http://josecarlosrevoredo.com/track.php?domain=josecarlosrevoredo.com&toggle=browserjs&uid=MTcyOTcyMzQ1MS4xNTg6NWNhZGExMWVmMjVjNmRmNWE1ODY2NTY2MmRhODIyZDg4ZmM2NTEzN2JjZjM3MGI2MzU1YzAxNTc4MTg0YTc1OTo2NzE5N2MzYjI2OTA5	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://syndicatedsearch.goog	chromecache_53.2.dr, chromecache_65.2.dr, chromecache_51.2.dr, chromecache_66.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/pagead/1p-conversion/16521530460/?gad_source=1&adview_type=5	chromecache_53.2.dr, chromecache_65.2.dr, chromecache_51.2.dr, chromecache_66.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.68	unknown	United States	15169	GOOGLEUS	false
142.250.185.68	www.google.com	United States	15169	GOOGLEUS	false
142.250.181.225	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
18.66.121.190	d38psrni17bvxu.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
52.18.59.124	josecarlosrevoredo.com	United States	16509	AMAZON-02US	false
18.66.121.135	unknown	United States	3	MIT-GATEWAYSUS	false
142.250.186.110	unknown	United States	15169	GOOGLEUS	false
172.217.16.196	unknown	United States	15169	GOOGLEUS	false
172.217.18.110	unknown	United States	15169	GOOGLEUS	false
142.250.185.65	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4
192.168.2.6
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1540660
Start date and time:	2024-10-24 00:43:09 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 11s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://josecarlosrevoredo.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@17/32@26/14
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.181.227, 142.250.185.174, 142.250.110.84, 34.104.35.123, 142.250.185.162, 142.250.181.226, 172.202.163.200, 199.232.210.172, 20.242.39.171, 192.229.221.95, 13.85.23.206, 142.250.185.195
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, otelrules.afd.azureedge.net, partner.googleadservices.com, clientservices.googleapis.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, ocsp.edge.digicert.com, sls.update.microsoft.com, update.googleapis.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://josecarlosrevoredo.com/

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: http://josecarlosrevoredo.com/privacy.html Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "PRIVACY POLICY PARKINGCREW", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: http://josecarlosrevoredo.com/privacy.html Model: claude-3-haiku-20240307	```json { "brands": [ "PRIVACY POLICY PARKINGCREW" ] }
	```json { "brands": [ "PRIVACY POLICY PARKINGCREW" ] }

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 49

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (398), with no line terminators
Category:	downloaded
Size (bytes):	398
Entropy (8bit):	5.497145771587542
Encrypted:	false
SSDEEP:	12:xWzzabJu1aPap6QA47HcjbJutaPd6QA47n:A2bJu1iyXzcjbJu0PZX7n
MD5:	5E9384F5707833DF83C4063F9F0511D3
SHA1:	79683D173194051DEEBC45C7EB8178DFA89C40C5
SHA-256:	7276EF8A8AD4786730F49E4EB122F53BE25AD3930A6652A2C9E697E57AA2D51A
SHA-512:	9CF7CB806BC52412B32E248CBC3EA7E7F3B4720C09299367F717C2F7D577D5848294B4DA7BC46762493C978E40E79196349CE00DC6A03E4B940F688E05D94C30
Malicious:	false
Reputation:	low
URL:	https://partner.googleadservices.com/gampad/cookie.js?domain=josecarlosrevoredo.com&client=dp-teaminternet09_3ph&product=SAS&callback=__sasCookie&cookie_types=v1%2Cv2
Preview:	__sasCookie({"_cookies_":[{"_value_":"ID=d0ca61f97155fcbe:T=1729723455:RT=1729723455:S=ALNI_MbXwVlo1IwlPM5_zzullDbZJuFGCw","_expires_":1763419455,"_path_":"/","_domain_":"josecarlosrevoredo.com","_version_":1},{"_value_":"UID=00000f135cdc478c:T=1729723455:RT=1729723455:S=ALNI_MYG-WeUQOjmkCw_4DcYwZqsBTmvZw","_expires_":1763419455,"_path_":"/","_domain_":"josecarlosrevoredo.com","_version_":2}]});

Chrome Cache Entry: 50

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (398), with no line terminators
Category:	dropped
Size (bytes):	398
Entropy (8bit):	5.439890851620852
Encrypted:	false
SSDEEP:	6:xWzPKd0mF6IFAX2wbuPe+NA47M+dG56e6G7gu/B72wbuPe+NA4Aen:xW6NFjFGiA47HP87gujiA47n
MD5:	773E958DB258CACCC773E50B11D22436
SHA1:	32016A9DDB8BF8CD8102E4A4F2AD471B4D3A6669
SHA-256:	7DC03EEB6E331E8792B070EFBCA326C62D6E31072324DBF59B2F59BC2BE28F3E
SHA-512:	689B1DCBF6E1BC29720B101452A71E1FA3AAB62B45644DDEF04BEC4B4F97441EA15C40785AB6A3FE3E760A8903667CE755387B2C769FEEB5981785D2021D32A5
Malicious:	false
Reputation:	low
Preview:	__sasCookie({"_cookies_":[{"_value_":"ID=a822115e88a64849:T=1729723456:RT=1729723456:S=ALNI_Maziq3cNI1fF4vmIy7PGDseymG6PA","_expires_":1763419456,"_path_":"/","_domain_":"josecarlosrevoredo.com","_version_":1},{"_value_":"UID=00000f135d5c6e76:T=1729723456:RT=1729723456:S=ALNI_MbNA-M5fd_Tvo767mcZVEW6nZXxUg","_expires_":1763419456,"_path_":"/","_domain_":"josecarlosrevoredo.com","_version_":2}]});

Chrome Cache Entry: 51

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1932)
Category:	downloaded
Size (bytes):	153657
Entropy (8bit):	5.540319553134199
Encrypted:	false
SSDEEP:	1536:4916arcaGxRkkVPyXpKHhiaCnAJy05IjP6P4zeHHWGEfpH00fwBqg+GCSvlPbu15:2x6yhuHHWpfpU0YBWG10s8vJxx8sVj
MD5:	78C89FF43A8065D9F48FACB3369F9B06
SHA1:	02105E6FAEFDCC3D23302D85DE420E67421DD472
SHA-256:	C747A5C703D6CA5F524480092062D14B2B3CBE84ABA3552591B173CF98E0F556
SHA-512:	DF26367303C2DB1460A02EA74FCF8CB020EAE43A03EB6C8EC7B1570020D7E229D8F0EA79964FBD26C426AF5B7BC3C305E028CB6CCB39851DB217D0B8571C80AB
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/adsense/domains/caf.js?pac=2
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"15149429945501071566",packages:"domains",module:"ads",version:"1",m:{cei:"17301437,17301439,17301442,17301542,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":500,"afs_chatbot_aa":500,"afs_gpp_api":0}}};var n;function aa(a){var b=0;return f

Chrome Cache Entry: 52

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	dropped
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
Preview:	....................

Chrome Cache Entry: 53

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1932)
Category:	downloaded
Size (bytes):	153659
Entropy (8bit):	5.540521854701729
Encrypted:	false
SSDEEP:	1536:S916arcaGxRkkVPyXpKHhiaCnAJy05IjP6P4zeHHWGEfpH00fwBqg+GCSvlPbu15:Qx6yhuHHWpfpU0YBWG10s8vJxx8sVj
MD5:	E0BB7EB8C32BDEC766192983BAFAAF4C
SHA1:	A59A4264F958089AB4D68B770611ABFF55657607
SHA-256:	2A9F9CDA62AAAF49D8CC0841F7FB806947F73C6FEC0EC06A04C6C70915D95DEE
SHA-512:	506D1B152FC4466EFE2A65F4C63829216DE47ED5D42FA62D8B4D3C865BA89A9EEF7204E32F3F89E27A82123B5BAB664A7FA27B53B6CD2372EE11CF228B5FC4CB
Malicious:	false
Reputation:	low
URL:	https://www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"15149429945501071566",packages:"domains",module:"ads",version:"1",m:{cei:"17300002,17301437,17301439,17301442,17301542,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":500,"afs_chatbot_aa":500,"afs_gpp_api":0}}};var n;function aa(a){var b=0;return

Chrome Cache Entry: 54

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1500 x 600, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	11375
Entropy (8bit):	7.645494653990172
Encrypted:	false
SSDEEP:	192:Wg3JLNIdFb540f7mqTiLHrBjcCTN1MbaJD/RBse6ogkORdLv2Ha/:vD4N54IsHVjdN1tD7lODL/
MD5:	0CB2E5165DC9324EB462199F04E1FFA9
SHA1:	9E0F89847EC8A98D98A6020BC5C4ED32B7A48BF8
SHA-256:	67DFF0AAD873050F12609885F2264417CCDD0D438311000A704C89F0865F7865
SHA-512:	7A285C4A87B9F9093B7BA720D8FE08E0AD7E2EBDE9EF8C8D11B70AFA08245AF8F8A7281C7B3FBE8BAD21C3AFDE4F32634D3BD416822892AA47BA82C12F4B8191
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......X.....Om......tEXtSoftware.Adobe ImageReadyq.e<....PLTE......cdtIK^IK]IK\03IHK_acsceubdtcet..0=@SHK]IL]HK\MPbNQbORc.....0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes..-..0. 5.!6."7.#8."6.$9 %:!&;"'<"';$)>#(<%?$)=&+@%>',A&+?(-B).C(-A).B/C+0D,1E05I15G<@R=ASIM_HL]KO`HL\MQbaeu.....-../.....0../.....0../..1..1..2..3..4. 5.!6.#8.$9.%: &;"':$)<&+>',?(-@).A/B+0C,1D/A-2E.3F/4G05H16I/4F05G38K6;N49K;@S;@R<ASGL^bfuaetbft.....0.!5."6.#7.$8.%9 &:!';"(<!':#)=#)<$=&,@&,?+1E)/B06IGL]GL\HM]bfs..-.....0..1. 4.!5."6.#7.$8 '< ';*0B.4F06H06G..-..0.!5 (< (;...................................................................................................................................................................................................................................................t....tRNS..............................................................................................................................................

Chrome Cache Entry: 55

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1500 x 600, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	11375
Entropy (8bit):	7.645494653990172
Encrypted:	false
SSDEEP:	192:Wg3JLNIdFb540f7mqTiLHrBjcCTN1MbaJD/RBse6ogkORdLv2Ha/:vD4N54IsHVjdN1tD7lODL/
MD5:	0CB2E5165DC9324EB462199F04E1FFA9
SHA1:	9E0F89847EC8A98D98A6020BC5C4ED32B7A48BF8
SHA-256:	67DFF0AAD873050F12609885F2264417CCDD0D438311000A704C89F0865F7865
SHA-512:	7A285C4A87B9F9093B7BA720D8FE08E0AD7E2EBDE9EF8C8D11B70AFA08245AF8F8A7281C7B3FBE8BAD21C3AFDE4F32634D3BD416822892AA47BA82C12F4B8191
Malicious:	false
Reputation:	low
URL:	http://d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png
Preview:	.PNG........IHDR.......X.....Om......tEXtSoftware.Adobe ImageReadyq.e<....PLTE......cdtIK^IK]IK\03IHK_acsceubdtcet..0=@SHK]IL]HK\MPbNQbORc.....0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes..-..0. 5.!6."7.#8."6.$9 %:!&;"'<"';$)>#(<%?$)=&+@%>',A&+?(-B).C(-A).B/C+0D,1E05I15G<@R=ASIM_HL]KO`HL\MQbaeu.....-../.....0../.....0../..1..1..2..3..4. 5.!6.#8.$9.%: &;"':$)<&+>',?(-@).A/B+0C,1D/A-2E.3F/4G05H16I/4F05G38K6;N49K;@S;@R<ASGL^bfuaetbft.....0.!5."6.#7.$8.%9 &:!';"(<!':#)=#)<$=&,@&,?+1E)/B06IGL]GL\HM]bfs..-.....0..1. 4.!5."6.#7.$8 '< ';*0B.4F06H06G..-..0.!5 (< (;...................................................................................................................................................................................................................................................t....tRNS..............................................................................................................................................

Chrome Cache Entry: 56

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
URL:	http://josecarlosrevoredo.com/track.php?domain=josecarlosrevoredo.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyOTcyMzQ1MS4xNTg6NWNhZGExMWVmMjVjNmRmNWE1ODY2NTY2MmRhODIyZDg4ZmM2NTEzN2JjZjM3MGI2MzU1YzAxNTc4MTg0YTc1OTo2NzE5N2MzYjI2OTA5
Preview:	....................

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.202819531114783
Encrypted:	false
SSDEEP:	3:YWQRAW64:YWQmq
MD5:	7363E85FE9EDEE6F053A4B319588C086
SHA1:	A15E2127145548437173FC17F3E980E3F3DEE2D0
SHA-256:	C955E57777EC0D73639DCA6748560D00AA5EB8E12F13EBB2ED9656ADD3908F97
SHA-512:	A2FD24056E3EC2F1628F89EB2F1B36A9FC2437AE58D34190630FE065DF2BBEDAF9BD8AEE5F8949A002070052CA68CC6C0167214DD55DF289783CFF682B808D85
Malicious:	false
Reputation:	low
URL:	http://josecarlosrevoredo.com/ls.php?t=67197c3b&token=7e73f5f3413db55900d4ec5ccbef1893e626adf4
Preview:	{"success":true}

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	dropped
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
Preview:	....................

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	200
Entropy (8bit):	5.025855206845441
Encrypted:	false
SSDEEP:	6:t6wfDpmc4slhohC/vmI4SmK0xhFELE47zF:t6qnoU/vmRI0xQTF
MD5:	11B3089D616633CA6B73B57AA877EEB4
SHA1:	07632F63E06B30D9B63C97177D3A8122629BDA9B
SHA-256:	809FB4619D2A2F1A85DBDA8CC69A7F1659215212D708A098D62150EEE57070C1
SHA-512:	079B0E35B479DFDBE64A987661000F4A034B10688E26F2A5FE6AAA807E81CCC5593D40609B731AB3340E687D83DD08DE4B8B1E01CDAC9D4523A9F6BB3ACFCBA0
Malicious:	false
Reputation:	low
URL:	https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff
Preview:	<svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	391
Entropy (8bit):	4.7474201749507134
Encrypted:	false
SSDEEP:	6:t6wfDpmc4slzTPl2O4UYaeLIT4W+KS4S1UpMTQpi6jUs8sh6B+BSmK0C:t6qFPUPkHSt1UiT6i6jUs8b0I0C
MD5:	8959DDCD9712196961D93F58064ED655
SHA1:	62AB1E38E7E9FBF58A04381B76C2D96A9C829F24
SHA-256:	17C7A89BF169C2EE400E31B042CEA68513F06B9CD7D1E8990DBEC800F0D771C7
SHA-512:	5E9EFFA313C30B351345DB963238B4AFD0728CA302FD79A853C80C89F042266D44CC1D29492520FB0FA80B47135E54E6963DFC21972F6B236B84C1DA2FAD809D
Malicious:	false
Reputation:	low
Preview:	<svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" width="200" height="200" viewBox="0 0 24 24"><path d="M15.5 14h-.79l-.28-.27C15.41 12.59 16 11.11 16 9.5 16 5.91 13.09 3 9.5 3S3 5.91 3 9.5 5.91 16 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L20.49 19l-4.99-5zm-6 0C7.01 14 5 11.99 5 9.5S7.01 5 9.5 5 14 7.01 14 9.5 11.99 14 9.5 14z"/><path d="M0 0h24v24H0z" fill="none"/></svg>.

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 15758
Category:	downloaded
Size (bytes):	5938
Entropy (8bit):	7.967531103097659
Encrypted:	false
SSDEEP:	96:CppAFZS5g7r6bQ2kSrKj/NWeRLTvCGQTD+i+VU0OGThwxQtSwzhL3NuFr:CpS+gnFUKNWq3vCGViApTTAQtSwlYx
MD5:	C096358AD8BF709A318D6A9A2DF40052
SHA1:	580DCE5FBF24C92D695CC102E21BEA965785B25F
SHA-256:	DF641E6A8D96870C538CDEFEABF3B99CFFAC3D5DC46237EB04FB52E3A39891CA
SHA-512:	36938681124DAB01A2CDA1049B0A667000952EF62D54766F1617588B86BB40716863D625871E8E1FDF416DBFB9E2B4A2202DBB7150843F4F9D7D4B3092BB8030
Malicious:	false
Reputation:	low
URL:	http://josecarlosrevoredo.com/
Preview:	...........[yw...;...9.....bcc....\|.^Bb..L......H.,.....[B.8/y.f.3Nl..............2.....C.PL=.3..]c4b.j.y:.../.p;....]...]...g.....Q...i...}w..Z.}..;.h.....Mw.\..F.?.sg.0..^.Z..~W.3...h.......{m...k....Z.\|\...j.....6.~4}...K.......U..l\.s.`wv.......\n....X..Ko.....-.....[..S.{uR.?.<[..&.'...v.jb....\n6.eg....s...~nN.Pl..W..I..1.\|....p.....L2...z.&.]'`N.i/&,.....<....b.t.gAu..2.D......x..l.zAl..2.A.d...2.%.X..X.....fU-....rF...........l.n....=..=..z.t..;>......,l...i..ox.O8..`.............N..@.zv.......K..>.Y.v.f.....r......h....[.....M..(.V.y..W\|z..V...6`V...5._M.......-.e..V....bLj.....d../b...g.........4-....vI...>.m................. ...y..u#....&...p=Pq..h......].@!.&f0t.{}.9P.U..)y5b[...M....5...QU.G.....}..mWG..H...../r..UV...M......(eNR.O4KN40....ESf.#+.t].,d<....".e..r3dS..CX....w\.-... .....r.......b.z...Q...=.\|...-.6...ga...S..>D..;..A..d....B..c.\|.C.....G..I.z.;;.X...>t@.O.....).._.=A)[zB+....VZ+....?.l.J..7;.X~f.{#f.

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	200
Entropy (8bit):	5.025855206845441
Encrypted:	false
SSDEEP:	6:t6wfDpmc4slhohC/vmI4SmK0xhFELE47zF:t6qnoU/vmRI0xQTF
MD5:	11B3089D616633CA6B73B57AA877EEB4
SHA1:	07632F63E06B30D9B63C97177D3A8122629BDA9B
SHA-256:	809FB4619D2A2F1A85DBDA8CC69A7F1659215212D708A098D62150EEE57070C1
SHA-512:	079B0E35B479DFDBE64A987661000F4A034B10688E26F2A5FE6AAA807E81CCC5593D40609B731AB3340E687D83DD08DE4B8B1E01CDAC9D4523A9F6BB3ACFCBA0
Malicious:	false
Reputation:	low
Preview:	<svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	391
Entropy (8bit):	4.7474201749507134
Encrypted:	false
SSDEEP:	6:t6wfDpmc4slzTPl2O4UYaeLIT4W+KS4S1UpMTQpi6jUs8sh6B+BSmK0C:t6qFPUPkHSt1UiT6i6jUs8b0I0C
MD5:	8959DDCD9712196961D93F58064ED655
SHA1:	62AB1E38E7E9FBF58A04381B76C2D96A9C829F24
SHA-256:	17C7A89BF169C2EE400E31B042CEA68513F06B9CD7D1E8990DBEC800F0D771C7
SHA-512:	5E9EFFA313C30B351345DB963238B4AFD0728CA302FD79A853C80C89F042266D44CC1D29492520FB0FA80B47135E54E6963DFC21972F6B236B84C1DA2FAD809D
Malicious:	false
Reputation:	low
URL:	https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff
Preview:	<svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" width="200" height="200" viewBox="0 0 24 24"><path d="M15.5 14h-.79l-.28-.27C15.41 12.59 16 11.11 16 9.5 16 5.91 13.09 3 9.5 3S3 5.91 3 9.5 5.91 16 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L20.49 19l-4.99-5zm-6 0C7.01 14 5 11.99 5 9.5S7.01 5 9.5 5 14 7.01 14 9.5 11.99 14 9.5 14z"/><path d="M0 0h24v24H0z" fill="none"/></svg>.

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (14099)
Category:	downloaded
Size (bytes):	14908
Entropy (8bit):	5.482092714579947
Encrypted:	false
SSDEEP:	96:2E/yk2iIlb5lphMzwronb86Lgh3hvLNYrWJ8hdMVDcw96DKxM8MVDww96DZCyMVK:2E12iMpgbLLgh3VLWrk2STCPkKuwQ
MD5:	8915FA9A26E5E4BA0AFCA8F0B52D22A0
SHA1:	07C9516FAB9D665C0A655CBE1474787325F45B50
SHA-256:	ED5A5F7679F0C7679248C2C0B1B23B9722092F80281CCA5549A2CB6A5FFB880F
SHA-512:	27F5C79D946C5EC550F586B068E5CB0C88996115CC385F20F59255A6EC21DCFE7D35513902AD5EDC7B367B3FF51D9983693A910025E8920E8DE305FABB3B95A4
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=bucket007%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet09_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fjosecarlosrevoredo.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MTk3YzNiMjY4YTd8fHwxNzI5NzIzNDUxLjE4OTR8ZTM5ZmQ1Yzk3ZDdiZTc3NmQzY2U5ODRkMGRmOTBlNWU3ZDk3YTVmMHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDdlNzNmNWYzNDEzZGI1NTkwMGQ0ZWM1Y2NiZWYxODkzZTYyNmFkZjR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fA%253D%253D&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2192083245873568&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301542%2C17301266%2C72717107&format=r3%7Cs&nocache=9961729723453569&num=0&output=afd_ads&domain_name=josecarlosrevoredo.com&v=3&bsl=8&pac=2&u_his=1&u_tz=-240&dt=1729723453572&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=789&frm=0&uio=--&cont=tc&drt=0&jsid=caf&nfp=1&jsv=688160506&rurl=http%3A%2F%2Fjosecarlosrevoredo.com%2F
Preview:	<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:last-child{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.a{text-decoration:none; text-transform:none; color:inherit; display:inline-block;}.span{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;display:inline-block; overflow:hidden; text-transform:none;}.img{border:none; max-width:100%; max-height:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.j_>span:last-child, .j_>div:last-child, .w_, .w_:last-child{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;}.l_{-ms-overflow

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1932)
Category:	dropped
Size (bytes):	153659
Entropy (8bit):	5.540529682756947
Encrypted:	false
SSDEEP:	1536:n916arcaGxRkkVPyXpKHhiaCnAJy05IjP6P4zeHHWGEfpH00fwBqg+GCSvlPbu15:9x6yhuHHWpfpU0YBWG10s8vJxx8sVj
MD5:	7F9EE154C62ADB807783527673E92C8F
SHA1:	98225F162092186A3B445AB1C9B01E9FAC0D9728
SHA-256:	5ACC6923E160653583F53C5863D79F02E955052CA9F8FB84E3B53F095294A475
SHA-512:	992E905D760E13EAE8A93EBC5DF664F38414FD59A13BCFE4239FC56A240B1BFA06E2416EF02456EDF291C60403AF70F83A838C4960BFC528FD5EAE4EC1243EBF
Malicious:	false
Reputation:	low
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"15149429945501071566",packages:"domains",module:"ads",version:"1",m:{cei:"17300003,17301437,17301439,17301442,17301542,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":500,"afs_chatbot_aa":500,"afs_gpp_api":0}}};var n;function aa(a){var b=0;return

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1932)
Category:	dropped
Size (bytes):	153666
Entropy (8bit):	5.540429548828427
Encrypted:	false
SSDEEP:	1536:M916arcaGxRkkVPyXpKHhiaCnAJy05IjP6P4zeHHWGEfpH00fwBqg+GCSvlPbu15:Sx6yhuHHWpfpU0YBWG10s8vJxx8sVj
MD5:	FBF293214F699DB139ABE3F24399D7ED
SHA1:	6CC5C65FA153284998C993C7A30ACC230FDB08BF
SHA-256:	CC8AF65EE0A044381E528FB7BDD06F9D4D1836F1402E7D6402BD207F97D7A060
SHA-512:	AA5F3AAD85203B6F59E4D2A9ED28FE1838267C032FF0FC4F35C677C54ADF77F664E02C8A63905A5C898CBD80B23C529550761A05D3D9D124D8357A6EE59C0205
Malicious:	false
Reputation:	low
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"15149429945501071566",packages:"domains",module:"ads",version:"1",m:{cei:"17300002,17301431,17301433,17301436,17301542,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":500,"afs_chatbot_aa":500,"afs_gpp_api":0}}};var n;function aa(a){var b=0

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
URL:	http://josecarlosrevoredo.com/track.php?domain=josecarlosrevoredo.com&toggle=browserjs&uid=MTcyOTcyMzQ1MS4xNTg6NWNhZGExMWVmMjVjNmRmNWE1ODY2NTY2MmRhODIyZDg4ZmM2NTEzN2JjZjM3MGI2MzU1YzAxNTc4MTg0YTc1OTo2NzE5N2MzYjI2OTA5
Preview:	....................

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 13914
Category:	downloaded
Size (bytes):	5390
Entropy (8bit):	7.964839351197916
Encrypted:	false
SSDEEP:	96:qFfHK5O8aNe7IwBihfpzjM0mJLua/BM6Yzlu6spbQMOMx+eL:qZHgO8aNiIthpjM9iWBRwAPOUb
MD5:	CDB1844616F8EB20DFE0E022BC34C6AF
SHA1:	254D9594044F9E7A20B58A01EF319A50C4DE8E60
SHA-256:	8EE6F23805DDE8DFA23850A3BF892FB916D38A592AF0DDC49556E6374A52304C
SHA-512:	7687D10797C5888FCE67AA68904749B8915E5F45BEDC0F3FE2AE6F18E0D9781048EF150B2168D64EB02C37B2582A7CE02266EBC9FA4EAB8D3077E9C32424486A
Malicious:	false
Reputation:	low
URL:	http://josecarlosrevoredo.com/privacy.html
Preview:	...........[.n.I.}..E.......K."Y..-.6..$P..~Z$..d..U.UE.A..b?i.a...E.....t..2....'..:....r..v...2V..~..]..A......L..??L>^....:).2J...z...,.2;....uw}.M.yo2.}.ZG..~<(.3.a.v.....qR.......Q.N.o;2...S...........m.2MJ....Mf:..{.)...}.`...oW...uG..J........l.m.G..g?}v^......u....z_E.....yh.3u.F..l...~...y.....'s...L.a...0n..y...$<..e.o.:..LW....]g_..H....L........G37...n...o8W....O'''o~{.].:.L.%.l...(,.g.O_r..J.pb.U.b.g....J.#,.6.5....p....<./.....P....B.8..Ylf%%l.......B...&..41......!..."...l...}K%?...M...d{y...q.=......G4Q....AM7,....X...Y}[P....[.XIb..54...-8S.....'..U.....4.SU.........$..........).....8.....F0...R.E=.0.....,._..Ks.".I.<.....%e.....OO...8N...nv.}QC...P.......E...Rx..rqT....g..n...~../k..0.'S...Bx..9y...F..u..s..f..\|..o;.f..\|q\|q;.}._~U.7.e.........x..k.c......p%\|.]L.:.W.t.=..!"s's..T.r...L........<}........C..A .q.\.e....jp1.l...Q.*....&mfUQ.9..H.......-......(((vjo.....-..J...@.Yt....&7...`Z...P'.N.....(u...Y.T.c.f...

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 24, 2024 00:44:05.911331892 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 24, 2024 00:44:10.118896008 CEST	49735	80	192.168.2.4	52.18.59.124
Oct 24, 2024 00:44:10.119252920 CEST	49736	80	192.168.2.4	52.18.59.124
Oct 24, 2024 00:44:10.124337912 CEST	80	49735	52.18.59.124	192.168.2.4
Oct 24, 2024 00:44:10.124475002 CEST	49735	80	192.168.2.4	52.18.59.124
Oct 24, 2024 00:44:10.124605894 CEST	80	49736	52.18.59.124	192.168.2.4
Oct 24, 2024 00:44:10.124659061 CEST	49736	80	192.168.2.4	52.18.59.124
Oct 24, 2024 00:44:10.126764059 CEST	49735	80	192.168.2.4	52.18.59.124
Oct 24, 2024 00:44:10.132193089 CEST	80	49735	52.18.59.124	192.168.2.4
Oct 24, 2024 00:44:11.362775087 CEST	80	49735	52.18.59.124	192.168.2.4
Oct 24, 2024 00:44:11.362818003 CEST	80	49735	52.18.59.124	192.168.2.4
Oct 24, 2024 00:44:11.362832069 CEST	80	49735	52.18.59.124	192.168.2.4
Oct 24, 2024 00:44:11.362938881 CEST	49735	80	192.168.2.4	52.18.59.124
Oct 24, 2024 00:44:11.363013983 CEST	80	49735	52.18.59.124	192.168.2.4
Oct 24, 2024 00:44:11.363027096 CEST	80	49735	52.18.59.124	192.168.2.4
Oct 24, 2024 00:44:11.363039017 CEST	80	49735	52.18.59.124	192.168.2.4
Oct 24, 2024 00:44:11.363059044 CEST	49735	80	192.168.2.4	52.18.59.124
Oct 24, 2024 00:44:11.363114119 CEST	49735	80	192.168.2.4	52.18.59.124
Oct 24, 2024 00:44:11.651418924 CEST	49735	80	192.168.2.4	52.18.59.124
Oct 24, 2024 00:44:11.658109903 CEST	80	49735	52.18.59.124	192.168.2.4
Oct 24, 2024 00:44:11.669538021 CEST	49739	80	192.168.2.4	18.66.121.190
Oct 24, 2024 00:44:11.676397085 CEST	80	49739	18.66.121.190	192.168.2.4
Oct 24, 2024 00:44:11.676526070 CEST	49739	80	192.168.2.4	18.66.121.190
Oct 24, 2024 00:44:11.676769018 CEST	49739	80	192.168.2.4	18.66.121.190
Oct 24, 2024 00:44:11.683600903 CEST	80	49739	18.66.121.190	192.168.2.4
Oct 24, 2024 00:44:11.936775923 CEST	49741	443	192.168.2.4	142.250.185.68
Oct 24, 2024 00:44:11.936821938 CEST	443	49741	142.250.185.68	192.168.2.4
Oct 24, 2024 00:44:11.936918020 CEST	49741	443	192.168.2.4	142.250.185.68
Oct 24, 2024 00:44:11.937146902 CEST	49741	443	192.168.2.4	142.250.185.68
Oct 24, 2024 00:44:11.937161922 CEST	443	49741	142.250.185.68	192.168.2.4
Oct 24, 2024 00:44:12.251014948 CEST	80	49735	52.18.59.124	192.168.2.4
Oct 24, 2024 00:44:12.251987934 CEST	49735	80	192.168.2.4	52.18.59.124
Oct 24, 2024 00:44:12.257623911 CEST	80	49735	52.18.59.124	192.168.2.4
Oct 24, 2024 00:44:12.257720947 CEST	49735	80	192.168.2.4	52.18.59.124
Oct 24, 2024 00:44:12.282658100 CEST	49736	80	192.168.2.4	52.18.59.124
Oct 24, 2024 00:44:12.288589954 CEST	80	49736	52.18.59.124	192.168.2.4
Oct 24, 2024 00:44:12.308918953 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:12.308965921 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:12.309039116 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:12.309315920 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:12.309326887 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:12.358936071 CEST	49744	80	192.168.2.4	52.18.59.124
Oct 24, 2024 00:44:12.364407063 CEST	80	49744	52.18.59.124	192.168.2.4
Oct 24, 2024 00:44:12.364506006 CEST	49744	80	192.168.2.4	52.18.59.124
Oct 24, 2024 00:44:12.364708900 CEST	49744	80	192.168.2.4	52.18.59.124
Oct 24, 2024 00:44:12.370006084 CEST	80	49744	52.18.59.124	192.168.2.4
Oct 24, 2024 00:44:12.508733034 CEST	80	49739	18.66.121.190	192.168.2.4
Oct 24, 2024 00:44:12.508755922 CEST	80	49739	18.66.121.190	192.168.2.4
Oct 24, 2024 00:44:12.508769035 CEST	80	49739	18.66.121.190	192.168.2.4
Oct 24, 2024 00:44:12.508841991 CEST	49739	80	192.168.2.4	18.66.121.190
Oct 24, 2024 00:44:12.508893967 CEST	80	49739	18.66.121.190	192.168.2.4
Oct 24, 2024 00:44:12.508930922 CEST	49739	80	192.168.2.4	18.66.121.190
Oct 24, 2024 00:44:12.509037018 CEST	80	49739	18.66.121.190	192.168.2.4
Oct 24, 2024 00:44:12.509057999 CEST	80	49739	18.66.121.190	192.168.2.4
Oct 24, 2024 00:44:12.509068966 CEST	80	49739	18.66.121.190	192.168.2.4
Oct 24, 2024 00:44:12.509082079 CEST	80	49739	18.66.121.190	192.168.2.4
Oct 24, 2024 00:44:12.509105921 CEST	49739	80	192.168.2.4	18.66.121.190
Oct 24, 2024 00:44:12.509140968 CEST	49739	80	192.168.2.4	18.66.121.190
Oct 24, 2024 00:44:12.509448051 CEST	80	49739	18.66.121.190	192.168.2.4
Oct 24, 2024 00:44:12.509460926 CEST	80	49739	18.66.121.190	192.168.2.4
Oct 24, 2024 00:44:12.509501934 CEST	49739	80	192.168.2.4	18.66.121.190
Oct 24, 2024 00:44:12.570420027 CEST	49745	80	192.168.2.4	18.66.121.135
Oct 24, 2024 00:44:12.575826883 CEST	80	49745	18.66.121.135	192.168.2.4
Oct 24, 2024 00:44:12.575896025 CEST	49745	80	192.168.2.4	18.66.121.135
Oct 24, 2024 00:44:12.576384068 CEST	49745	80	192.168.2.4	18.66.121.135
Oct 24, 2024 00:44:12.581743002 CEST	80	49745	18.66.121.135	192.168.2.4
Oct 24, 2024 00:44:12.791796923 CEST	443	49741	142.250.185.68	192.168.2.4
Oct 24, 2024 00:44:12.792172909 CEST	49741	443	192.168.2.4	142.250.185.68
Oct 24, 2024 00:44:12.792184114 CEST	443	49741	142.250.185.68	192.168.2.4
Oct 24, 2024 00:44:12.793205023 CEST	443	49741	142.250.185.68	192.168.2.4
Oct 24, 2024 00:44:12.793256044 CEST	49741	443	192.168.2.4	142.250.185.68
Oct 24, 2024 00:44:12.794701099 CEST	49741	443	192.168.2.4	142.250.185.68
Oct 24, 2024 00:44:12.794760942 CEST	443	49741	142.250.185.68	192.168.2.4
Oct 24, 2024 00:44:12.835089922 CEST	49741	443	192.168.2.4	142.250.185.68
Oct 24, 2024 00:44:12.835120916 CEST	443	49741	142.250.185.68	192.168.2.4
Oct 24, 2024 00:44:12.883234978 CEST	49741	443	192.168.2.4	142.250.185.68
Oct 24, 2024 00:44:12.891308069 CEST	80	49736	52.18.59.124	192.168.2.4
Oct 24, 2024 00:44:12.944091082 CEST	49736	80	192.168.2.4	52.18.59.124
Oct 24, 2024 00:44:13.156347990 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.156678915 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:13.156697989 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.157685041 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.157757998 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:13.158123016 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:13.158171892 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.158339024 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:13.158344030 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.207705975 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:13.410317898 CEST	80	49745	18.66.121.135	192.168.2.4
Oct 24, 2024 00:44:13.410372972 CEST	80	49745	18.66.121.135	192.168.2.4
Oct 24, 2024 00:44:13.410387039 CEST	80	49745	18.66.121.135	192.168.2.4
Oct 24, 2024 00:44:13.410525084 CEST	49745	80	192.168.2.4	18.66.121.135
Oct 24, 2024 00:44:13.410645008 CEST	80	49745	18.66.121.135	192.168.2.4
Oct 24, 2024 00:44:13.410656929 CEST	80	49745	18.66.121.135	192.168.2.4
Oct 24, 2024 00:44:13.410669088 CEST	80	49745	18.66.121.135	192.168.2.4
Oct 24, 2024 00:44:13.410680056 CEST	80	49745	18.66.121.135	192.168.2.4
Oct 24, 2024 00:44:13.410691023 CEST	80	49745	18.66.121.135	192.168.2.4
Oct 24, 2024 00:44:13.410703897 CEST	80	49745	18.66.121.135	192.168.2.4
Oct 24, 2024 00:44:13.410705090 CEST	49745	80	192.168.2.4	18.66.121.135
Oct 24, 2024 00:44:13.410751104 CEST	49745	80	192.168.2.4	18.66.121.135
Oct 24, 2024 00:44:13.410752058 CEST	49745	80	192.168.2.4	18.66.121.135
Oct 24, 2024 00:44:13.411178112 CEST	80	49745	18.66.121.135	192.168.2.4
Oct 24, 2024 00:44:13.411963940 CEST	49745	80	192.168.2.4	18.66.121.135
Oct 24, 2024 00:44:13.413187981 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.413239002 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.413274050 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.413299084 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.413314104 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:13.413324118 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.413336039 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.413351059 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:13.413371086 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:13.413383007 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.415843964 CEST	80	49745	18.66.121.135	192.168.2.4
Oct 24, 2024 00:44:13.421636105 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.423722029 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:13.423727989 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.459702969 CEST	49745	80	192.168.2.4	18.66.121.135
Oct 24, 2024 00:44:13.475241899 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:13.475259066 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.521400928 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:13.529959917 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.530029058 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.530164003 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:13.530185938 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.532663107 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.532737017 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:13.532756090 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.537058115 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.537108898 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:13.537130117 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.545929909 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.546057940 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:13.546081066 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.550975084 CEST	49747	443	192.168.2.4	184.28.90.27
Oct 24, 2024 00:44:13.551026106 CEST	443	49747	184.28.90.27	192.168.2.4
Oct 24, 2024 00:44:13.551234961 CEST	49747	443	192.168.2.4	184.28.90.27
Oct 24, 2024 00:44:13.560575962 CEST	49747	443	192.168.2.4	184.28.90.27
Oct 24, 2024 00:44:13.560610056 CEST	443	49747	184.28.90.27	192.168.2.4
Oct 24, 2024 00:44:13.564093113 CEST	80	49744	52.18.59.124	192.168.2.4
Oct 24, 2024 00:44:13.593873024 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:13.593902111 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.613709927 CEST	49744	80	192.168.2.4	52.18.59.124
Oct 24, 2024 00:44:13.633832932 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:13.646922112 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.647020102 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.647069931 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:13.647104025 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.652617931 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.652678013 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:13.652704954 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.656028986 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.656056881 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.656081915 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:13.656110048 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.656151056 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:13.662911892 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.705964088 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.706007957 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.706064939 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:13.706096888 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.706296921 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:13.763751030 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.763987064 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.764647007 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:13.764667988 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.769503117 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.771095037 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.771193027 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:13.771209955 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.772639990 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:13.772655010 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.816627026 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:13.816646099 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.822926044 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.822972059 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.823071957 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:13.823086023 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.823873997 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:13.880894899 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.883578062 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.883657932 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.883764982 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:13.883790970 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.886686087 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:13.887825012 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.896507025 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.896550894 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.896595955 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:13.896612883 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.898628950 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:13.908231974 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.939790010 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.940536022 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:13.940562963 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.984606028 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.986028910 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:13.986054897 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:13.986624956 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:13.997982979 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.001512051 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.001547098 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.001687050 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:14.001710892 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.002629042 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:14.004884005 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.015276909 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.015320063 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.015439034 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:14.015463114 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.018651962 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:14.056727886 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.101622105 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.101664066 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.101752043 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:14.101775885 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.103085041 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:14.114861965 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.117650032 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.117712975 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:14.117733002 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.121777058 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.121853113 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:14.121876001 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.121927977 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.121963978 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:14.121970892 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.130896091 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.130954027 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:14.130969048 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.173696041 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.173758984 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:14.173778057 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.218933105 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.219001055 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:14.219017982 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.231975079 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.232017040 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.232036114 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:14.232055902 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.232094049 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:14.234940052 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.238992929 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.239028931 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.239043951 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:14.239058018 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.239101887 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:14.247814894 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.288054943 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:14.288073063 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.291475058 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.291532040 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:14.291548967 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.333009958 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:14.335701942 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.349071026 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.349108934 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.349129915 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:14.349149942 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.349189043 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:14.351907015 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.352049112 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.352087975 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:14.352099895 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.356190920 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.356230021 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.356256008 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:14.356261969 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.356273890 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.356302023 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:14.364689112 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.364732981 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:14.364749908 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.407882929 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.407974005 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:14.408000946 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.413085938 CEST	443	49747	184.28.90.27	192.168.2.4
Oct 24, 2024 00:44:14.413156986 CEST	49747	443	192.168.2.4	184.28.90.27
Oct 24, 2024 00:44:14.416945934 CEST	49747	443	192.168.2.4	184.28.90.27
Oct 24, 2024 00:44:14.416964054 CEST	443	49747	184.28.90.27	192.168.2.4
Oct 24, 2024 00:44:14.417342901 CEST	443	49747	184.28.90.27	192.168.2.4
Oct 24, 2024 00:44:14.452655077 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.452729940 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:14.452749014 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.466001034 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.466064930 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:14.466082096 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.468837976 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.468900919 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:14.468914032 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.471352100 CEST	49747	443	192.168.2.4	184.28.90.27
Oct 24, 2024 00:44:14.473184109 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.473259926 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:14.473270893 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.473390102 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.473433971 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:14.474962950 CEST	49743	443	192.168.2.4	142.250.186.68
Oct 24, 2024 00:44:14.474987984 CEST	443	49743	142.250.186.68	192.168.2.4
Oct 24, 2024 00:44:14.491718054 CEST	49747	443	192.168.2.4	184.28.90.27
Oct 24, 2024 00:44:14.498466969 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:14.498506069 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:14.498569012 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:14.498836040 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:14.498852015 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:14.539328098 CEST	443	49747	184.28.90.27	192.168.2.4
Oct 24, 2024 00:44:14.577456951 CEST	49750	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:14.577502966 CEST	443	49750	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:14.577568054 CEST	49750	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:14.578048944 CEST	49750	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:14.578059912 CEST	443	49750	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:14.732832909 CEST	49751	80	192.168.2.4	52.18.59.124
Oct 24, 2024 00:44:14.737574100 CEST	443	49747	184.28.90.27	192.168.2.4
Oct 24, 2024 00:44:14.737651110 CEST	443	49747	184.28.90.27	192.168.2.4
Oct 24, 2024 00:44:14.737695932 CEST	49747	443	192.168.2.4	184.28.90.27
Oct 24, 2024 00:44:14.740185976 CEST	80	49751	52.18.59.124	192.168.2.4
Oct 24, 2024 00:44:14.740262985 CEST	49751	80	192.168.2.4	52.18.59.124
Oct 24, 2024 00:44:14.744932890 CEST	49736	80	192.168.2.4	52.18.59.124
Oct 24, 2024 00:44:14.745115042 CEST	49747	443	192.168.2.4	184.28.90.27
Oct 24, 2024 00:44:14.745147943 CEST	443	49747	184.28.90.27	192.168.2.4
Oct 24, 2024 00:44:14.745161057 CEST	49747	443	192.168.2.4	184.28.90.27
Oct 24, 2024 00:44:14.745168924 CEST	443	49747	184.28.90.27	192.168.2.4
Oct 24, 2024 00:44:14.752523899 CEST	80	49736	52.18.59.124	192.168.2.4
Oct 24, 2024 00:44:14.812374115 CEST	49752	443	192.168.2.4	184.28.90.27
Oct 24, 2024 00:44:14.812433958 CEST	443	49752	184.28.90.27	192.168.2.4
Oct 24, 2024 00:44:14.812506914 CEST	49752	443	192.168.2.4	184.28.90.27
Oct 24, 2024 00:44:14.813227892 CEST	49752	443	192.168.2.4	184.28.90.27
Oct 24, 2024 00:44:14.813261032 CEST	443	49752	184.28.90.27	192.168.2.4
Oct 24, 2024 00:44:15.343786001 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:15.344197989 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:15.344224930 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:15.345287085 CEST	80	49736	52.18.59.124	192.168.2.4
Oct 24, 2024 00:44:15.345345020 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:15.345417023 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:15.345443964 CEST	80	49736	52.18.59.124	192.168.2.4
Oct 24, 2024 00:44:15.345457077 CEST	80	49736	52.18.59.124	192.168.2.4
Oct 24, 2024 00:44:15.345468998 CEST	80	49736	52.18.59.124	192.168.2.4
Oct 24, 2024 00:44:15.345475912 CEST	49736	80	192.168.2.4	52.18.59.124
Oct 24, 2024 00:44:15.345482111 CEST	80	49736	52.18.59.124	192.168.2.4
Oct 24, 2024 00:44:15.345510960 CEST	49736	80	192.168.2.4	52.18.59.124
Oct 24, 2024 00:44:15.345567942 CEST	80	49736	52.18.59.124	192.168.2.4
Oct 24, 2024 00:44:15.345609903 CEST	49736	80	192.168.2.4	52.18.59.124
Oct 24, 2024 00:44:15.346060038 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:15.346122980 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:15.346472025 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:15.346479893 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:15.387845039 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:15.411901951 CEST	49736	80	192.168.2.4	52.18.59.124
Oct 24, 2024 00:44:15.419696093 CEST	80	49736	52.18.59.124	192.168.2.4
Oct 24, 2024 00:44:15.419795990 CEST	49736	80	192.168.2.4	52.18.59.124
Oct 24, 2024 00:44:15.430609941 CEST	443	49750	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:15.430844069 CEST	49750	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:15.430855036 CEST	443	49750	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:15.431958914 CEST	443	49750	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:15.432040930 CEST	49750	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:15.432413101 CEST	49750	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:15.432480097 CEST	443	49750	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:15.432742119 CEST	49750	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:15.432749033 CEST	443	49750	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:15.474471092 CEST	49750	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:15.605595112 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:15.605647087 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:15.605747938 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:15.605784893 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:15.605804920 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:15.605815887 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:15.605829954 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:15.605840921 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:15.605874062 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:15.606072903 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:15.614224911 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:15.614279985 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:15.614288092 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:15.657759905 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:15.657777071 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:15.665698051 CEST	443	49752	184.28.90.27	192.168.2.4
Oct 24, 2024 00:44:15.665793896 CEST	49752	443	192.168.2.4	184.28.90.27
Oct 24, 2024 00:44:15.675030947 CEST	49752	443	192.168.2.4	184.28.90.27
Oct 24, 2024 00:44:15.675066948 CEST	443	49752	184.28.90.27	192.168.2.4
Oct 24, 2024 00:44:15.675404072 CEST	443	49752	184.28.90.27	192.168.2.4
Oct 24, 2024 00:44:15.698524952 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:15.720941067 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:15.721051931 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:15.721105099 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:15.721115112 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:15.724519014 CEST	49752	443	192.168.2.4	184.28.90.27
Oct 24, 2024 00:44:15.725970984 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:15.728657007 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:15.728677034 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:15.730124950 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:15.732634068 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:15.732644081 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:15.739005089 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:15.740633965 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:15.740652084 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:15.782953024 CEST	49752	443	192.168.2.4	184.28.90.27
Oct 24, 2024 00:44:15.785212040 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:15.785234928 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:15.785690069 CEST	443	49750	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:15.785744905 CEST	443	49750	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:15.785775900 CEST	443	49750	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:15.785820961 CEST	49750	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:15.785835028 CEST	443	49750	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:15.786161900 CEST	49750	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:15.786169052 CEST	443	49750	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:15.786871910 CEST	443	49750	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:15.786906004 CEST	49750	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:15.786912918 CEST	443	49750	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:15.794081926 CEST	443	49750	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:15.794253111 CEST	49750	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:15.794265985 CEST	443	49750	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:15.823338032 CEST	443	49752	184.28.90.27	192.168.2.4
Oct 24, 2024 00:44:15.834413052 CEST	49750	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:15.834424019 CEST	443	49750	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:15.834429979 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:15.836551905 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:15.841474056 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:15.841521025 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:15.841561079 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:15.841588020 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:15.841656923 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:15.845756054 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:15.848639965 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:15.848680973 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:15.848737955 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:15.848759890 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:15.848800898 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:15.854569912 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:15.880790949 CEST	49750	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:15.895617008 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:15.895643950 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:15.909112930 CEST	443	49750	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:15.909193993 CEST	443	49750	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:15.909224033 CEST	49750	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:15.909234047 CEST	443	49750	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:15.909733057 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:15.909981966 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:15.910006046 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:15.916148901 CEST	49750	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:15.916213989 CEST	443	49750	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:15.916270971 CEST	49750	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:15.921142101 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:15.921184063 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:15.921597958 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:15.922250986 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:15.922261953 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:15.953315973 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:15.953408957 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:15.953438044 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:15.958827019 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:15.958905935 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:15.958914042 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:15.964060068 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:15.964118004 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:15.964126110 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:15.970040083 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:15.970104933 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:15.970133066 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:15.970141888 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:15.970187902 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:16.023040056 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.027365923 CEST	443	49752	184.28.90.27	192.168.2.4
Oct 24, 2024 00:44:16.027440071 CEST	443	49752	184.28.90.27	192.168.2.4
Oct 24, 2024 00:44:16.027791977 CEST	49752	443	192.168.2.4	184.28.90.27
Oct 24, 2024 00:44:16.028429985 CEST	49752	443	192.168.2.4	184.28.90.27
Oct 24, 2024 00:44:16.028455973 CEST	443	49752	184.28.90.27	192.168.2.4
Oct 24, 2024 00:44:16.028470993 CEST	49752	443	192.168.2.4	184.28.90.27
Oct 24, 2024 00:44:16.028477907 CEST	443	49752	184.28.90.27	192.168.2.4
Oct 24, 2024 00:44:16.063703060 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:16.063731909 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.069009066 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.069084883 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:16.069118023 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.074403048 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.074501991 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:16.074531078 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.077939987 CEST	49751	80	192.168.2.4	52.18.59.124
Oct 24, 2024 00:44:16.079948902 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.079992056 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.080039024 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.080048084 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:16.080068111 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.080082893 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:16.083642006 CEST	80	49751	52.18.59.124	192.168.2.4
Oct 24, 2024 00:44:16.085594893 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.085694075 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:16.085721970 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.136445045 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:16.138658047 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.183056116 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.183094978 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.183140039 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:16.183166027 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.183208942 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:16.187819958 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.192246914 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.192285061 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.192378044 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:16.192399025 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.192437887 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:16.195301056 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.201179981 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.201214075 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.201268911 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:16.201293945 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.201329947 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:16.254206896 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.298774958 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.298820019 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.298845053 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:16.298873901 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.299007893 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:16.303431988 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.307760000 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.307799101 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.307840109 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:16.307864904 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.307910919 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:16.310851097 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.310928106 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.310995102 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:16.311013937 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.316761971 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.316853046 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:16.316867113 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.371414900 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:16.379636049 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.414556980 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.414608002 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.414644003 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.414668083 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:16.414696932 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.414719105 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:16.419754982 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.422772884 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:16.422801018 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.426441908 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.426646948 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:16.426664114 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.427576065 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.430646896 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:16.430665970 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.435956001 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.436017036 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:16.436043024 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.483442068 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:16.501889944 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.530356884 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.530406952 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.530443907 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.530489922 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.530519009 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:16.530555010 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.530570984 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:16.530600071 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:16.535440922 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.535531044 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.535610914 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:16.535620928 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.542036057 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.543036938 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.543123960 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:16.543144941 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.543195963 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:16.543201923 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.551358938 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.552656889 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:16.552685022 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.598560095 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:16.616986990 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.645888090 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.645939112 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.645979881 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.646011114 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.646084070 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:16.646109104 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.646128893 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:16.648653984 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:16.651130915 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.651348114 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.651442051 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.651498079 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:16.674503088 CEST	80	49751	52.18.59.124	192.168.2.4
Oct 24, 2024 00:44:16.725596905 CEST	49751	80	192.168.2.4	52.18.59.124
Oct 24, 2024 00:44:16.772277117 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:16.775335073 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:16.775362015 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:16.776545048 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:16.776593924 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:16.778470039 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:16.778546095 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:16.779398918 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:16.779412031 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:16.782176971 CEST	49748	443	192.168.2.4	172.217.16.196
Oct 24, 2024 00:44:16.782207012 CEST	443	49748	172.217.16.196	192.168.2.4
Oct 24, 2024 00:44:16.819534063 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:16.844372988 CEST	49744	80	192.168.2.4	52.18.59.124
Oct 24, 2024 00:44:16.851526022 CEST	80	49744	52.18.59.124	192.168.2.4
Oct 24, 2024 00:44:17.035449982 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.035499096 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.035551071 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.035598040 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.035603046 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:17.035629034 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.035641909 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:17.035819054 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.035857916 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:17.035864115 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.043793917 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.043864012 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:17.043873072 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.083925962 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:17.083940983 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.131220102 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:17.153086901 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.153147936 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.153199911 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:17.153215885 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.153454065 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.153497934 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:17.153506994 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.157994986 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.158046007 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:17.158052921 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.166852951 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.166896105 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:17.166903973 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.209708929 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:17.209791899 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.256932974 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:17.270539999 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.270608902 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.270648003 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:17.270663023 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.270968914 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.271004915 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:17.271011114 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.276366949 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.276405096 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.276432037 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:17.276447058 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.276484013 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:17.285126925 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.326978922 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.327027082 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.327048063 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:17.327079058 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.327119112 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:17.388242960 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.388309956 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.388356924 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:17.388405085 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.388580084 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.388621092 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:17.388627052 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.393954992 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.394002914 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:17.394015074 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.402509928 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.402565002 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:17.402580023 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.440118074 CEST	80	49744	52.18.59.124	192.168.2.4
Oct 24, 2024 00:44:17.444479942 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.444540024 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:17.444567919 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.454888105 CEST	49744	80	192.168.2.4	52.18.59.124
Oct 24, 2024 00:44:17.462647915 CEST	80	49744	52.18.59.124	192.168.2.4
Oct 24, 2024 00:44:17.462703943 CEST	49744	80	192.168.2.4	52.18.59.124
Oct 24, 2024 00:44:17.495184898 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:17.505477905 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.505682945 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.505722046 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:17.505758047 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.506175041 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.506211042 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:17.506230116 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.512043953 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.512074947 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.512096882 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:17.512130976 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.512173891 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:17.520071030 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.562524080 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.562573910 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.562586069 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:17.562613010 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.562669039 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:17.562674999 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.606164932 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:17.626049042 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.626535892 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.626570940 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.626586914 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:17.626605034 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.626656055 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:17.626665115 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.630469084 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.630522013 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:17.630534887 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.637600899 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.637651920 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:17.637665987 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.680000067 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.680043936 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.680052996 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:17.680071115 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.680140972 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:17.740825891 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.741647005 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.741692066 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:17.741698980 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.741709948 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.741751909 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:17.741763115 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.741797924 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.741832018 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:17.741838932 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.747402906 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.747454882 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:17.747467995 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.755462885 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.755510092 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:17.755527973 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.797360897 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.797431946 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.797446012 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:17.797473907 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.797514915 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:17.858329058 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.858886003 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.858937025 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:17.858951092 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.859297037 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.859361887 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:17.859373093 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.864743948 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.864813089 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:17.864831924 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.872963905 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.872997999 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.873014927 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:17.873034954 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.873073101 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:17.914664984 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.914752007 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.914794922 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:17.914815903 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.962959051 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:17.962989092 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.975961924 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.975999117 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.976022005 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:17.976039886 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.976074934 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:17.976423025 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.976620913 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.976661921 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.976664066 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:17.976675034 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.976746082 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:17.982094049 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.990447044 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.990494967 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.990493059 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:17.990508080 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:17.990557909 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:17.998594999 CEST	49672	443	192.168.2.4	173.222.162.32
Oct 24, 2024 00:44:17.998626947 CEST	443	49672	173.222.162.32	192.168.2.4
Oct 24, 2024 00:44:18.032205105 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:18.073209047 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:18.073229074 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:18.073421955 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:18.073478937 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:18.073487043 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:18.094301939 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:18.094377041 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:18.094387054 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:18.094512939 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:18.094562054 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:18.094568968 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:18.094707966 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:18.094760895 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:18.095407963 CEST	49754	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:18.095422983 CEST	443	49754	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:18.370171070 CEST	49758	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:18.370213032 CEST	443	49758	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:18.370304108 CEST	49758	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:18.371731043 CEST	49758	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:18.371761084 CEST	443	49758	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:18.406064987 CEST	49751	80	192.168.2.4	52.18.59.124
Oct 24, 2024 00:44:18.414509058 CEST	80	49751	52.18.59.124	192.168.2.4
Oct 24, 2024 00:44:18.530869961 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:18.530905008 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:18.531080961 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:18.532599926 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:18.532622099 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:19.009476900 CEST	80	49751	52.18.59.124	192.168.2.4
Oct 24, 2024 00:44:19.056598902 CEST	49751	80	192.168.2.4	52.18.59.124
Oct 24, 2024 00:44:19.126717091 CEST	80	49751	52.18.59.124	192.168.2.4
Oct 24, 2024 00:44:19.126821995 CEST	49751	80	192.168.2.4	52.18.59.124
Oct 24, 2024 00:44:19.226274967 CEST	443	49758	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:19.271903038 CEST	49758	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:19.308316946 CEST	49758	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:19.308330059 CEST	443	49758	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:19.308892012 CEST	443	49758	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:19.314754009 CEST	49758	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:19.314834118 CEST	443	49758	172.217.18.110	192.168.2.4
Oct 24, 2024 00:44:19.318784952 CEST	49751	80	192.168.2.4	52.18.59.124
Oct 24, 2024 00:44:19.325867891 CEST	80	49751	52.18.59.124	192.168.2.4
Oct 24, 2024 00:44:19.364509106 CEST	49758	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:44:19.395292997 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:19.398538113 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:19.398566008 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:19.399499893 CEST	49760	443	192.168.2.4	142.250.181.225
Oct 24, 2024 00:44:19.399549007 CEST	443	49760	142.250.181.225	192.168.2.4
Oct 24, 2024 00:44:19.399604082 CEST	49760	443	192.168.2.4	142.250.181.225
Oct 24, 2024 00:44:19.399754047 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:19.399807930 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:19.399930954 CEST	49761	443	192.168.2.4	142.250.181.225
Oct 24, 2024 00:44:19.399976015 CEST	443	49761	142.250.181.225	192.168.2.4
Oct 24, 2024 00:44:19.400016069 CEST	49761	443	192.168.2.4	142.250.181.225
Oct 24, 2024 00:44:19.400877953 CEST	49761	443	192.168.2.4	142.250.181.225
Oct 24, 2024 00:44:19.400888920 CEST	443	49761	142.250.181.225	192.168.2.4
Oct 24, 2024 00:44:19.401774883 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:19.401897907 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:19.402587891 CEST	49760	443	192.168.2.4	142.250.181.225
Oct 24, 2024 00:44:19.402604103 CEST	443	49760	142.250.181.225	192.168.2.4
Oct 24, 2024 00:44:19.402921915 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:19.402940989 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:19.457432032 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:19.460668087 CEST	49762	80	192.168.2.4	52.18.59.124
Oct 24, 2024 00:44:19.467809916 CEST	80	49762	52.18.59.124	192.168.2.4
Oct 24, 2024 00:44:19.467878103 CEST	49762	80	192.168.2.4	52.18.59.124
Oct 24, 2024 00:44:19.468612909 CEST	49762	80	192.168.2.4	52.18.59.124
Oct 24, 2024 00:44:19.475413084 CEST	80	49762	52.18.59.124	192.168.2.4
Oct 24, 2024 00:44:19.657831907 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:19.657891989 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:19.657938957 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:19.657942057 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:19.657970905 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:19.658010006 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:19.658391953 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:19.659215927 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:19.659255028 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:19.659261942 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:19.666219950 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:19.666260004 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:19.666273117 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:19.708400011 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:19.708430052 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:19.759604931 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:19.775208950 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:19.775427103 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:19.775474072 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:19.775501966 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:19.778023958 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:19.778069973 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:19.778080940 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:19.783153057 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:19.783193111 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:19.783202887 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:19.791620016 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:19.791671038 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:19.791696072 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:19.832503080 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:19.833730936 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:19.878802061 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:19.891961098 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:19.894601107 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:19.894648075 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:19.894654989 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:19.894665956 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:19.894701004 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:19.906511068 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:19.906600952 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:19.906646013 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:19.906666994 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:19.908854008 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:19.908901930 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:19.908909082 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:19.949477911 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:19.949542999 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:19.949568987 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:19.991796970 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:19.991827011 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.008996964 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.009068966 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:20.009109974 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.011531115 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.011580944 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:20.011600971 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.016094923 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.016144991 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:20.016172886 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.024832010 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.024882078 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:20.024897099 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.066647053 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.066699028 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.066709995 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:20.066755056 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.066795111 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:20.125566006 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.128371000 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.128464937 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.128463984 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:20.128499031 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.128612041 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:20.131594896 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.133725882 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.133796930 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.133816957 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:20.133852959 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.133958101 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:20.141957998 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.148410082 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.148504972 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:20.148534060 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.198548079 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:20.198577881 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.242862940 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.242907047 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.242923975 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:20.242954016 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.243081093 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:20.245246887 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.249885082 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.249954939 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:20.249979019 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.259298086 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.259339094 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.259393930 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:20.259428024 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.259465933 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:20.259690046 CEST	443	49761	142.250.181.225	192.168.2.4
Oct 24, 2024 00:44:20.259882927 CEST	49761	443	192.168.2.4	142.250.181.225
Oct 24, 2024 00:44:20.259896040 CEST	443	49761	142.250.181.225	192.168.2.4
Oct 24, 2024 00:44:20.260267019 CEST	443	49761	142.250.181.225	192.168.2.4
Oct 24, 2024 00:44:20.260281086 CEST	443	49761	142.250.181.225	192.168.2.4
Oct 24, 2024 00:44:20.260339022 CEST	49761	443	192.168.2.4	142.250.181.225
Oct 24, 2024 00:44:20.260348082 CEST	443	49761	142.250.181.225	192.168.2.4
Oct 24, 2024 00:44:20.260425091 CEST	49761	443	192.168.2.4	142.250.181.225
Oct 24, 2024 00:44:20.260947943 CEST	443	49761	142.250.181.225	192.168.2.4
Oct 24, 2024 00:44:20.265961885 CEST	443	49760	142.250.181.225	192.168.2.4
Oct 24, 2024 00:44:20.266172886 CEST	49760	443	192.168.2.4	142.250.181.225
Oct 24, 2024 00:44:20.266200066 CEST	443	49760	142.250.181.225	192.168.2.4
Oct 24, 2024 00:44:20.266617060 CEST	443	49760	142.250.181.225	192.168.2.4
Oct 24, 2024 00:44:20.266633987 CEST	443	49760	142.250.181.225	192.168.2.4
Oct 24, 2024 00:44:20.266688108 CEST	49760	443	192.168.2.4	142.250.181.225
Oct 24, 2024 00:44:20.266696930 CEST	443	49760	142.250.181.225	192.168.2.4
Oct 24, 2024 00:44:20.266724110 CEST	49760	443	192.168.2.4	142.250.181.225
Oct 24, 2024 00:44:20.266741037 CEST	49760	443	192.168.2.4	142.250.181.225
Oct 24, 2024 00:44:20.267390966 CEST	443	49760	142.250.181.225	192.168.2.4
Oct 24, 2024 00:44:20.302500963 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.321214914 CEST	49760	443	192.168.2.4	142.250.181.225
Oct 24, 2024 00:44:20.351850033 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:20.351869106 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.359972954 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.360025883 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.360049963 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:20.360068083 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.360110998 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:20.360130072 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.363450050 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.363497019 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:20.363507986 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.367065907 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.367105007 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.367114067 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:20.367120981 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.367172956 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:20.376177073 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.413029909 CEST	49761	443	192.168.2.4	142.250.181.225
Oct 24, 2024 00:44:20.419472933 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.419544935 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.419564009 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:20.419586897 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.419681072 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:20.419692993 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.473531961 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:20.476874113 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.477266073 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.477310896 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:20.477333069 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.480026007 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.480077982 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.480093956 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:20.480109930 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.480475903 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:20.484128952 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.493354082 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.493402958 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.493427992 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:20.493460894 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.493503094 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:20.536334991 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.536407948 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.536540985 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:20.536583900 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.584616899 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:20.593951941 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.594017982 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.594105005 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:20.594132900 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.597059965 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.597086906 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.597115040 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:20.597124100 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.597171068 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:20.597229004 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.601085901 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.601140022 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:20.601149082 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.610219955 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.610340118 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:20.610352993 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.653307915 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.653351068 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.653363943 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:20.653383017 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.653429031 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:20.654016018 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.671557903 CEST	80	49762	52.18.59.124	192.168.2.4
Oct 24, 2024 00:44:20.706548929 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:20.710694075 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.713994026 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.714039087 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.714092970 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:20.714107990 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.714158058 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:20.718085051 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.718168020 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.718231916 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:20.718240023 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.718455076 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:20.718461990 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.718472004 CEST	443	49759	142.250.186.110	192.168.2.4
Oct 24, 2024 00:44:20.718540907 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:20.718540907 CEST	49759	443	192.168.2.4	142.250.186.110
Oct 24, 2024 00:44:20.721776962 CEST	49762	80	192.168.2.4	52.18.59.124
Oct 24, 2024 00:44:21.012111902 CEST	49761	443	192.168.2.4	142.250.181.225
Oct 24, 2024 00:44:21.012304068 CEST	443	49761	142.250.181.225	192.168.2.4
Oct 24, 2024 00:44:21.012489080 CEST	49760	443	192.168.2.4	142.250.181.225
Oct 24, 2024 00:44:21.012690067 CEST	443	49760	142.250.181.225	192.168.2.4
Oct 24, 2024 00:44:21.013031006 CEST	49761	443	192.168.2.4	142.250.181.225
Oct 24, 2024 00:44:21.013032913 CEST	49760	443	192.168.2.4	142.250.181.225
Oct 24, 2024 00:44:21.013046980 CEST	443	49761	142.250.181.225	192.168.2.4
Oct 24, 2024 00:44:21.013083935 CEST	443	49760	142.250.181.225	192.168.2.4
Oct 24, 2024 00:44:21.062520027 CEST	49760	443	192.168.2.4	142.250.181.225
Oct 24, 2024 00:44:21.207623959 CEST	49761	443	192.168.2.4	142.250.181.225
Oct 24, 2024 00:44:21.268381119 CEST	443	49761	142.250.181.225	192.168.2.4
Oct 24, 2024 00:44:21.274707079 CEST	443	49760	142.250.181.225	192.168.2.4
Oct 24, 2024 00:44:21.316999912 CEST	49760	443	192.168.2.4	142.250.181.225
Oct 24, 2024 00:44:21.317030907 CEST	443	49760	142.250.181.225	192.168.2.4
Oct 24, 2024 00:44:21.363754034 CEST	49760	443	192.168.2.4	142.250.181.225
Oct 24, 2024 00:44:21.393955946 CEST	443	49760	142.250.181.225	192.168.2.4
Oct 24, 2024 00:44:21.394011021 CEST	443	49761	142.250.181.225	192.168.2.4
Oct 24, 2024 00:44:21.394023895 CEST	443	49760	142.250.181.225	192.168.2.4
Oct 24, 2024 00:44:21.394121885 CEST	49761	443	192.168.2.4	142.250.181.225
Oct 24, 2024 00:44:21.394170046 CEST	49760	443	192.168.2.4	142.250.181.225
Oct 24, 2024 00:44:21.962146044 CEST	49761	443	192.168.2.4	142.250.181.225
Oct 24, 2024 00:44:21.962177038 CEST	443	49761	142.250.181.225	192.168.2.4
Oct 24, 2024 00:44:21.963109970 CEST	49760	443	192.168.2.4	142.250.181.225
Oct 24, 2024 00:44:21.963149071 CEST	443	49760	142.250.181.225	192.168.2.4
Oct 24, 2024 00:44:22.818214893 CEST	443	49741	142.250.185.68	192.168.2.4
Oct 24, 2024 00:44:22.818286896 CEST	443	49741	142.250.185.68	192.168.2.4
Oct 24, 2024 00:44:22.818356991 CEST	49741	443	192.168.2.4	142.250.185.68
Oct 24, 2024 00:44:23.033147097 CEST	49741	443	192.168.2.4	142.250.185.68
Oct 24, 2024 00:44:23.033188105 CEST	443	49741	142.250.185.68	192.168.2.4
Oct 24, 2024 00:44:23.104341030 CEST	49765	443	192.168.2.4	142.250.185.65
Oct 24, 2024 00:44:23.104404926 CEST	443	49765	142.250.185.65	192.168.2.4
Oct 24, 2024 00:44:23.104476929 CEST	49765	443	192.168.2.4	142.250.185.65
Oct 24, 2024 00:44:23.104593992 CEST	49766	443	192.168.2.4	142.250.185.65
Oct 24, 2024 00:44:23.104624033 CEST	443	49766	142.250.185.65	192.168.2.4
Oct 24, 2024 00:44:23.104682922 CEST	49766	443	192.168.2.4	142.250.185.65
Oct 24, 2024 00:44:23.104860067 CEST	49765	443	192.168.2.4	142.250.185.65
Oct 24, 2024 00:44:23.104882002 CEST	443	49765	142.250.185.65	192.168.2.4
Oct 24, 2024 00:44:23.105245113 CEST	49766	443	192.168.2.4	142.250.185.65
Oct 24, 2024 00:44:23.105262995 CEST	443	49766	142.250.185.65	192.168.2.4
Oct 24, 2024 00:44:23.961219072 CEST	443	49766	142.250.185.65	192.168.2.4
Oct 24, 2024 00:44:23.961633921 CEST	49766	443	192.168.2.4	142.250.185.65
Oct 24, 2024 00:44:23.961661100 CEST	443	49766	142.250.185.65	192.168.2.4
Oct 24, 2024 00:44:23.962028027 CEST	443	49766	142.250.185.65	192.168.2.4
Oct 24, 2024 00:44:23.962048054 CEST	443	49766	142.250.185.65	192.168.2.4
Oct 24, 2024 00:44:23.962091923 CEST	49766	443	192.168.2.4	142.250.185.65
Oct 24, 2024 00:44:23.962101936 CEST	443	49766	142.250.185.65	192.168.2.4
Oct 24, 2024 00:44:23.962179899 CEST	49766	443	192.168.2.4	142.250.185.65
Oct 24, 2024 00:44:23.962692022 CEST	443	49766	142.250.185.65	192.168.2.4
Oct 24, 2024 00:44:23.962896109 CEST	49766	443	192.168.2.4	142.250.185.65
Oct 24, 2024 00:44:23.962956905 CEST	443	49766	142.250.185.65	192.168.2.4
Oct 24, 2024 00:44:23.963036060 CEST	49766	443	192.168.2.4	142.250.185.65
Oct 24, 2024 00:44:23.969480038 CEST	443	49765	142.250.185.65	192.168.2.4
Oct 24, 2024 00:44:23.969755888 CEST	49765	443	192.168.2.4	142.250.185.65
Oct 24, 2024 00:44:23.969777107 CEST	443	49765	142.250.185.65	192.168.2.4
Oct 24, 2024 00:44:23.970155001 CEST	443	49765	142.250.185.65	192.168.2.4
Oct 24, 2024 00:44:23.970169067 CEST	443	49765	142.250.185.65	192.168.2.4
Oct 24, 2024 00:44:23.970226049 CEST	49765	443	192.168.2.4	142.250.185.65
Oct 24, 2024 00:44:23.970232010 CEST	443	49765	142.250.185.65	192.168.2.4
Oct 24, 2024 00:44:23.970315933 CEST	49765	443	192.168.2.4	142.250.185.65
Oct 24, 2024 00:44:23.970896006 CEST	443	49765	142.250.185.65	192.168.2.4
Oct 24, 2024 00:44:23.971180916 CEST	49765	443	192.168.2.4	142.250.185.65
Oct 24, 2024 00:44:23.971266985 CEST	443	49765	142.250.185.65	192.168.2.4
Oct 24, 2024 00:44:23.971456051 CEST	49765	443	192.168.2.4	142.250.185.65
Oct 24, 2024 00:44:23.971462011 CEST	443	49765	142.250.185.65	192.168.2.4
Oct 24, 2024 00:44:24.003341913 CEST	443	49766	142.250.185.65	192.168.2.4
Oct 24, 2024 00:44:24.009481907 CEST	49723	80	192.168.2.4	199.232.214.172
Oct 24, 2024 00:44:24.015331030 CEST	49766	443	192.168.2.4	142.250.185.65
Oct 24, 2024 00:44:24.015350103 CEST	443	49766	142.250.185.65	192.168.2.4
Oct 24, 2024 00:44:24.015382051 CEST	49765	443	192.168.2.4	142.250.185.65
Oct 24, 2024 00:44:24.018148899 CEST	80	49723	199.232.214.172	192.168.2.4
Oct 24, 2024 00:44:24.018261909 CEST	49723	80	192.168.2.4	199.232.214.172
Oct 24, 2024 00:44:24.062155008 CEST	49766	443	192.168.2.4	142.250.185.65
Oct 24, 2024 00:44:24.215869904 CEST	443	49766	142.250.185.65	192.168.2.4
Oct 24, 2024 00:44:24.222892046 CEST	443	49765	142.250.185.65	192.168.2.4
Oct 24, 2024 00:44:24.265279055 CEST	49766	443	192.168.2.4	142.250.185.65
Oct 24, 2024 00:44:24.265297890 CEST	443	49766	142.250.185.65	192.168.2.4
Oct 24, 2024 00:44:24.265325069 CEST	49765	443	192.168.2.4	142.250.185.65
Oct 24, 2024 00:44:24.265338898 CEST	443	49765	142.250.185.65	192.168.2.4
Oct 24, 2024 00:44:24.268539906 CEST	49766	443	192.168.2.4	142.250.185.65
Oct 24, 2024 00:44:24.268606901 CEST	443	49766	142.250.185.65	192.168.2.4
Oct 24, 2024 00:44:24.268755913 CEST	443	49766	142.250.185.65	192.168.2.4
Oct 24, 2024 00:44:24.268790007 CEST	49766	443	192.168.2.4	142.250.185.65
Oct 24, 2024 00:44:24.268821001 CEST	49766	443	192.168.2.4	142.250.185.65
Oct 24, 2024 00:44:24.270549059 CEST	49765	443	192.168.2.4	142.250.185.65
Oct 24, 2024 00:44:24.270644903 CEST	443	49765	142.250.185.65	192.168.2.4
Oct 24, 2024 00:44:24.270778894 CEST	49765	443	192.168.2.4	142.250.185.65
Oct 24, 2024 00:44:25.791971922 CEST	80	49762	52.18.59.124	192.168.2.4
Oct 24, 2024 00:44:25.792052984 CEST	49762	80	192.168.2.4	52.18.59.124
Oct 24, 2024 00:44:26.624078035 CEST	49762	80	192.168.2.4	52.18.59.124
Oct 24, 2024 00:44:26.630001068 CEST	80	49762	52.18.59.124	192.168.2.4
Oct 24, 2024 00:44:57.510201931 CEST	49739	80	192.168.2.4	18.66.121.190
Oct 24, 2024 00:44:57.515639067 CEST	80	49739	18.66.121.190	192.168.2.4
Oct 24, 2024 00:44:58.420593023 CEST	49745	80	192.168.2.4	18.66.121.135
Oct 24, 2024 00:44:58.428577900 CEST	80	49745	18.66.121.135	192.168.2.4
Oct 24, 2024 00:44:59.877749920 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:44:59.877763987 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 00:44:59.877849102 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:44:59.878211975 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:44:59.878228903 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:00.767251015 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:00.767328024 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:00.771255016 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:00.771260023 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:00.771542072 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:00.779630899 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:00.823333025 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:01.027997971 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:01.028023005 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:01.028039932 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:01.028105974 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:01.028117895 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:01.028167963 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:01.145812988 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:01.145838022 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:01.145914078 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:01.145936966 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:01.145962954 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:01.145982027 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:01.502310991 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:01.502331018 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:01.502376080 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:01.502384901 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:01.502414942 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:01.502433062 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:01.503889084 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:01.503907919 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:01.503942966 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:01.503952980 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:01.503985882 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:01.503999949 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:01.511327028 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:01.511354923 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:01.511409998 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:01.511418104 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:01.511435986 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:01.511449099 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:01.620527029 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:01.620551109 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:01.620604992 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:01.620620966 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:01.620649099 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:01.620670080 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:01.739165068 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:01.739187956 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:01.739234924 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:01.739245892 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:01.739284992 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:01.857861996 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:01.857888937 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:01.857934952 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:01.857948065 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:01.857984066 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:01.858002901 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:01.941950083 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:01.941982031 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:01.942066908 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:01.942078114 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:01.942126036 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:02.018138885 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:02.018163919 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:02.018239975 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:02.018249989 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:02.018296003 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:02.136883020 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:02.136904955 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:02.136974096 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:02.136989117 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:02.137006044 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:02.137036085 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:02.214072943 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:02.214093924 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:02.214190960 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:02.214191914 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:02.214205980 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:02.214353085 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:02.332772970 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:02.332799911 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:02.333163023 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:02.333179951 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:02.333264112 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:02.333302021 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:02.333308935 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:02.333338022 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:02.333343983 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:02.333499908 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:02.333817959 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:02.333817959 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:02.333830118 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:02.333838940 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:02.447427988 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:02.447464943 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:02.447549105 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:02.448611975 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:02.448657036 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:02.448874950 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:02.448895931 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:02.448923111 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:02.449625969 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:02.449637890 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:02.450676918 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:02.450700045 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:02.451927900 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:02.451929092 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:02.451927900 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:02.451942921 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:02.451960087 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:02.452060938 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:02.452071905 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:02.452081919 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:02.452150106 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:02.452600956 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:02.452609062 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:02.452657938 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:02.452670097 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:03.176063061 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:03.177206039 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:03.177206993 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:03.177227974 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:03.177239895 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:03.182390928 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:03.182996035 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:03.183031082 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:03.183207035 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:03.183213949 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:03.184060097 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:03.184878111 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:03.184878111 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:03.184904099 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:03.184920073 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:03.187109947 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:03.187767029 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:03.187767029 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:03.187776089 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:03.187788010 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:03.187890053 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:03.188455105 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:03.188455105 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:03.188477993 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:03.188493013 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:03.303692102 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:03.303746939 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:03.303814888 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:03.303833961 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:03.303980112 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:03.304001093 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:03.304095984 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:03.304271936 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:03.304271936 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:03.304287910 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:03.304296970 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:03.307991982 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:03.308031082 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:03.308109045 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:03.308386087 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:03.308402061 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:03.313117981 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:03.313209057 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:03.313277960 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:03.313424110 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:03.313424110 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:03.313451052 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:03.313462019 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:03.316308022 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:03.316340923 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:03.316411018 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:03.316596985 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:03.316612005 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:03.316951036 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:03.317008018 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:03.317066908 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:03.317152977 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:03.317162991 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:03.317172050 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:03.317177057 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:03.318099022 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:03.318123102 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:03.318192005 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:03.318197966 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:03.318365097 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:03.318365097 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:03.318664074 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:03.318679094 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:03.320331097 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:03.320363998 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:03.320549965 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:03.320591927 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:03.320602894 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:03.320754051 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:03.320764065 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:03.321018934 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:03.321161985 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:03.321175098 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:03.341938972 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:03.341965914 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:03.342029095 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:03.342045069 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:03.342062950 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:03.342091084 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:03.342107058 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:03.342334986 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:03.342334986 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:03.342349052 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:03.342353106 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:03.345078945 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:03.345108032 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:03.345181942 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:03.345350027 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:03.345369101 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:04.038321018 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:04.038973093 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:04.038999081 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:04.039505959 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:04.039513111 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:04.040878057 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:04.041387081 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:04.041409969 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:04.041929960 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:04.041934967 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:04.067287922 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:04.068464041 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:04.068464041 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:04.068483114 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:04.068491936 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:04.089066982 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:04.089621067 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:04.089636087 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:04.090126991 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:04.090131998 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:04.171730042 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:04.171798944 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:04.171863079 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:04.172185898 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:04.172209024 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:04.172219038 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:04.172226906 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:04.172559977 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:04.172758102 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:04.172838926 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:04.173024893 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:04.173046112 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:04.173055887 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:04.173063993 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:04.176126957 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:04.176160097 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:04.176395893 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:04.176526070 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:04.176539898 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:04.176676035 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:04.176713943 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:04.176779032 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:04.177047968 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:04.177059889 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:04.204291105 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:04.204406977 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:04.204478025 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:04.204593897 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:04.204602003 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:04.204616070 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:04.204621077 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:04.207814932 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:04.207832098 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:04.207890034 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:04.208102942 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:04.208112955 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:04.225940943 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:04.226572037 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:04.226624966 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:04.226690054 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:04.226702929 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:04.226711988 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:04.226717949 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:04.229585886 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:04.229614973 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:04.229675055 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:04.229834080 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:04.229845047 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:04.320874929 CEST	49758	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:45:04.320887089 CEST	443	49758	172.217.18.110	192.168.2.4
Oct 24, 2024 00:45:04.880784035 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:04.882658958 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:04.882658958 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:04.882687092 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:04.882704020 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:04.913758039 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:04.914335966 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:04.914376020 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:04.915340900 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:04.915359020 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:04.915792942 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:04.916358948 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:04.916393042 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:04.917325020 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:04.917347908 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:04.953258038 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:04.954005957 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:04.954039097 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:04.954550982 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:04.954557896 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:04.983014107 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:04.983911037 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:04.983947039 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:04.984534025 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:04.984540939 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:05.020972013 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:05.021043062 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:05.021096945 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:05.021490097 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:05.021512985 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:05.021528006 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:05.021536112 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:05.025727034 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:05.025763988 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:05.025830984 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:05.026014090 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:05.026026011 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:05.046313047 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:05.046854973 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:05.046921015 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:05.047023058 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:05.047043085 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:05.047055960 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:05.047060966 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:05.048683882 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:05.048767090 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:05.048820019 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:05.049021959 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:05.049050093 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:05.049063921 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:05.049072981 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:05.050904989 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:05.050936937 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:05.051120043 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:05.051256895 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:05.051273108 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:05.051848888 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:05.051883936 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:05.051955938 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:05.052120924 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:05.052134991 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:05.087681055 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:05.087866068 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:05.088099003 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:05.088236094 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:05.088252068 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:05.088265896 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:05.088272095 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:05.091514111 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:05.091557026 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:05.091639042 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:05.091823101 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:05.091835976 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:05.115964890 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:05.116710901 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:05.116777897 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:05.116823912 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:05.116838932 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:05.116856098 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:05.116862059 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:05.120021105 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:05.120054007 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:05.120352983 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:05.120537043 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:05.120548010 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:05.995851040 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:05.996454000 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:05.996479034 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:05.996969938 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:05.997014046 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:05.997020960 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:05.997148991 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:05.997416019 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:05.997442961 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:05.997489929 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:05.997522116 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:05.997814894 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:05.997821093 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:05.997878075 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:05.998389006 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:05.998418093 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:05.998508930 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:05.998516083 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:05.998788118 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:05.998795986 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:06.249665976 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:06.249687910 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:06.249702930 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:06.249730110 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:06.249738932 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:06.249763966 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:06.249799013 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:06.249815941 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:06.249819040 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:06.249819040 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:06.249896049 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:06.249943972 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:06.250119925 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:06.250139952 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:06.250152111 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:06.250158072 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:06.250216961 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:06.250236034 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:06.250257015 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:06.250263929 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:06.251034975 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:06.251045942 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:06.251473904 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:06.252309084 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:06.252315998 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:06.253106117 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:06.253120899 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:06.253870010 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:06.253876925 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:06.255405903 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:06.255445957 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:06.255506992 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:06.255657911 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:06.255669117 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:06.255691051 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:06.255713940 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:06.255767107 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:06.256352901 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:06.256362915 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:06.257066965 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:06.257081032 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:06.257208109 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:06.257328987 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:06.257334948 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:06.257349014 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:06.257373095 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:06.257426977 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:06.257559061 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:06.257569075 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:06.383141994 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:06.383375883 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:06.383480072 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:06.383517027 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:06.383529902 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:06.383543015 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:06.383548975 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:06.387123108 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:06.387146950 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:06.387227058 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:06.387414932 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:06.387425900 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.000152111 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.000819921 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:07.000842094 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.001576900 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:07.001584053 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.002734900 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.003192902 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:07.003228903 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.003757954 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:07.003763914 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.004476070 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.004793882 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:07.004820108 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.005302906 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:07.005309105 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.005481958 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.005822897 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:07.005845070 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.006328106 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:07.006333113 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.138365984 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.138441086 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.138520956 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:07.138760090 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:07.138778925 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.138792038 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:07.138797998 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.139859915 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.139945030 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.140089989 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:07.140250921 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.140275002 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.140458107 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:07.140474081 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.140485048 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:07.140491009 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.140897989 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:07.140938044 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.141331911 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.141555071 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:07.141625881 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:07.141633034 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.141930103 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:07.141942978 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.142057896 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.142122030 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.142180920 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:07.142457008 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:07.142473936 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.142514944 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:07.142520905 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.143064976 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:07.143086910 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.143326044 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:07.144174099 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:07.144186974 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.145241976 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:07.145277977 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.145338058 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:07.145370960 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.145374060 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:07.145417929 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:07.145504951 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:07.145522118 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.145651102 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:07.145668030 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.146812916 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:07.146847963 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.146928072 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:07.147154093 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:07.147165060 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.277259111 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.277941942 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.278048038 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:07.278130054 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:07.278142929 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.278160095 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:07.278165102 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.281104088 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:07.281133890 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.281338930 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:07.281634092 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:07.281647921 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.869326115 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.869817972 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:07.869848013 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.870470047 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:07.870476961 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.884501934 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.885010004 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:07.885039091 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.885392904 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.885478973 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:07.885484934 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.885752916 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:07.885777950 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.886138916 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:07.886143923 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.887228966 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.887559891 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:07.887588978 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.887985945 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:07.887991905 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.997751951 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.997828007 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.997878075 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:07.998102903 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:07.998121023 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:07.998132944 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:07.998138905 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.001363039 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.001398087 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.001512051 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.001669884 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.001681089 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.003618956 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.004065037 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.004096031 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.004889965 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.004894972 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.018876076 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.018951893 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.019063950 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.019129992 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.019135952 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.019260883 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.019260883 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.019282103 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.019293070 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.019323111 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.019411087 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.019429922 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.019440889 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.019448996 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.023236990 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.023297071 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.023516893 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.023988962 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.024033070 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.024139881 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.024178028 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.024210930 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.024241924 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.024269104 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.024311066 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.024317026 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.024322033 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.024344921 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.024362087 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.024518967 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.024528980 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.027232885 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.027245045 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.027616978 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.027616978 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.027651072 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.134727001 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.134790897 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.134855986 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.135060072 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.135071039 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.135077953 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.135083914 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.138232946 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.138253927 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.138365984 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.138613939 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.138626099 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.747020006 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.747872114 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.747884989 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.748336077 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.748342991 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.757424116 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.757796049 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.757811069 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.758203983 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.758208990 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.776628017 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.777048111 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.777062893 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.777460098 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.777463913 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.783708096 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.784046888 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.784056902 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.784473896 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.784478903 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.875802040 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.876499891 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.876519918 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.876991987 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.876997948 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.887168884 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.887249947 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.887419939 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.887604952 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.887618065 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.887628078 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.887634039 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.889956951 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.890234947 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.890528917 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.890965939 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.891002893 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.891098022 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.891247034 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.891257048 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.891634941 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.891640902 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.891653061 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.891657114 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.893415928 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.893449068 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.893564939 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.893681049 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.893687010 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.913506985 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.913584948 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.913683891 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.913738012 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.913755894 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.913772106 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.913778067 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.915960073 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.915983915 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.916115046 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.916235924 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.916249037 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.920109987 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.920180082 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.920228958 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.920384884 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.920403004 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.920417070 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.920423985 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.922720909 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.922754049 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:08.922810078 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.922939062 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:08.922949076 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:09.010318041 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:09.010497093 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:09.010620117 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:09.014588118 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:09.014589071 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:09.014604092 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:09.014614105 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:09.017457962 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:09.017488003 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:09.017704010 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:09.017865896 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:09.017872095 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:09.619560003 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:09.620228052 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:09.620244980 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:09.620601892 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:09.620615959 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:09.644159079 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:09.644793987 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:09.644825935 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:09.645363092 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:09.645371914 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:09.659637928 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:09.660167933 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:09.660181046 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:09.660610914 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:09.660615921 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:09.670871973 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:09.671382904 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:09.671437979 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:09.671849012 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:09.671855927 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:09.750452995 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:09.751887083 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:09.751955986 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:09.752018929 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:09.752036095 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:09.753160000 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:09.753629923 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:09.753673077 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:09.754087925 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:09.754097939 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:09.755625010 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:09.755665064 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:09.755753040 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:09.755949020 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:09.755956888 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:09.777540922 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:09.777805090 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:09.777869940 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:09.777910948 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:09.777932882 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:09.777945042 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:09.777952909 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:09.780652046 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:09.780698061 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:09.780754089 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:09.780945063 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:09.780958891 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:09.792526960 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:09.792613983 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:09.792787075 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:09.792834997 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:09.792851925 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:09.792862892 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:09.792869091 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:09.795603037 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:09.795639038 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:09.795711994 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:09.795872927 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:09.795886993 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:09.806180000 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:09.806303024 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:09.806365013 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:09.806560040 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:09.806579113 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:09.806600094 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:09.806606054 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:09.809448004 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:09.809488058 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:09.809870958 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:09.810079098 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:09.810094118 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:09.883728981 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:09.883913994 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:09.883982897 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:09.884200096 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:09.884200096 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:09.884234905 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:09.884257078 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:09.887204885 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:09.887255907 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:09.887329102 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:09.887474060 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:09.887495041 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:10.498322010 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:10.498991013 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:10.499001980 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:10.499340057 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:10.499345064 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:10.520440102 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:10.521006107 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:10.521028042 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:10.521573067 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:10.521580935 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:10.525374889 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:10.525854111 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:10.525868893 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:10.526417017 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:10.526422977 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:10.548302889 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:10.548858881 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:10.548887014 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:10.549416065 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:10.549422979 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:10.627154112 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:10.627672911 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:10.627698898 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:10.628117085 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:10.628124952 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:10.631102085 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:10.631236076 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:10.631300926 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:10.631375074 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:10.631388903 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:10.631820917 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:10.631827116 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:10.634047031 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:10.634085894 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:10.634155035 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:10.634319067 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:10.634335041 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:10.653249979 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:10.653404951 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:10.653526068 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:10.653563976 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:10.653582096 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:10.653595924 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:10.653601885 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:10.655380964 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:10.655479908 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:10.655533075 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:10.655632973 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:10.655647993 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:10.655658007 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:10.655663967 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:10.656676054 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:10.656704903 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:10.656816959 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:10.656944990 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:10.656956911 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:10.657617092 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:10.657639027 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:10.657962084 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:10.658090115 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:10.658099890 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:10.679019928 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:10.679452896 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:10.679507971 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:10.679558039 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:10.679572105 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:10.679586887 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:10.679593086 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:10.682457924 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:10.682478905 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:10.682550907 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:10.682715893 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:10.682729006 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:10.756127119 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:10.756432056 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:10.756491899 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:10.756525040 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:10.756540060 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:10.756551981 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:10.756556988 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:10.759309053 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:10.759344101 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:10.759563923 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:10.759764910 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:10.759780884 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:10.974662066 CEST	49724	80	192.168.2.4	199.232.214.172
Oct 24, 2024 00:45:10.980717897 CEST	80	49724	199.232.214.172	192.168.2.4
Oct 24, 2024 00:45:10.980777979 CEST	49724	80	192.168.2.4	199.232.214.172
Oct 24, 2024 00:45:11.367876053 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:11.368721962 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:11.368746996 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:11.369519949 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:11.369528055 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:11.395246983 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:11.405442953 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:11.412482023 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:11.415335894 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:11.415361881 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:11.416311979 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:11.416332006 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:11.425730944 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:11.425756931 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:11.427872896 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:11.427891016 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:11.428505898 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:11.428531885 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:11.429217100 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:11.429227114 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:11.490586042 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:11.491929054 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:11.491959095 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:11.492854118 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:11.492861032 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:11.542457104 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:11.542557955 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:11.542625904 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:11.546612978 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:11.546641111 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:11.546653986 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:11.546659946 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:11.550725937 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:11.550760031 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:11.551034927 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:11.551274061 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:11.551281929 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:11.555471897 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:11.555962086 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:11.556024075 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:11.556200981 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:11.556214094 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:11.557595015 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:11.557665110 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:11.557744980 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:11.558290005 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:11.558305979 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:11.558320999 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:11.558329105 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:11.563436985 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:11.563474894 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:11.563607931 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:11.563915968 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:11.563927889 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:11.566947937 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:11.566972017 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:11.567066908 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:11.567190886 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:11.567199945 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:11.622056961 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:11.622190952 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:11.622272015 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:11.622816086 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:11.622833014 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:11.622843027 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:11.622850895 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:11.627810955 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:11.627841949 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:11.628077984 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:11.628335953 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:11.628346920 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:11.840497971 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:11.840929985 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:11.840991020 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:11.841097116 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:11.841106892 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:11.841119051 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:11.841125011 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:11.846944094 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:11.846971035 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:11.847047091 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:11.847723961 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:11.847738028 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:11.979931116 CEST	49829	443	192.168.2.4	142.250.185.68
Oct 24, 2024 00:45:11.979958057 CEST	443	49829	142.250.185.68	192.168.2.4
Oct 24, 2024 00:45:11.980226994 CEST	49829	443	192.168.2.4	142.250.185.68
Oct 24, 2024 00:45:11.980510950 CEST	49829	443	192.168.2.4	142.250.185.68
Oct 24, 2024 00:45:11.980521917 CEST	443	49829	142.250.185.68	192.168.2.4
Oct 24, 2024 00:45:12.293292999 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:12.294104099 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:12.294116020 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:12.294610023 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:12.294615984 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:12.296792984 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:12.297336102 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:12.297348022 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:12.297710896 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:12.297714949 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:12.326076984 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:12.326723099 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:12.326740980 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:12.327219963 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:12.327229023 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:12.374188900 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:12.374816895 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:12.374845982 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:12.375511885 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:12.375529051 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:12.424420118 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:12.424696922 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:12.424931049 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:12.425352097 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:12.425352097 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:12.425373077 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:12.425390959 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:12.426320076 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:12.426398039 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:12.426529884 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:12.430461884 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:12.430461884 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:12.430473089 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:12.430483103 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:12.435070038 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:12.435112000 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:12.435198069 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:12.438112020 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:12.438157082 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:12.438227892 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:12.438420057 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:12.438432932 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:12.438648939 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:12.438662052 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:12.460228920 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:12.460628033 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:12.460935116 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:12.474127054 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:12.474154949 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:12.480231047 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:12.480269909 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:12.480427980 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:12.480712891 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:12.480727911 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:12.507750034 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:12.507859945 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:12.507992029 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:12.508282900 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:12.508302927 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:12.515139103 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:12.515185118 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:12.515434027 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:12.515819073 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:12.515832901 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:12.586086035 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:12.587130070 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:12.587156057 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:12.587965965 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:12.587979078 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:12.728193998 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:12.728271961 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:12.728347063 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:12.729154110 CEST	49828	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:12.729175091 CEST	443	49828	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:12.735282898 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:12.735340118 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:12.735435009 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:12.735977888 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:12.735992908 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:12.839898109 CEST	443	49829	142.250.185.68	192.168.2.4
Oct 24, 2024 00:45:12.856236935 CEST	49829	443	192.168.2.4	142.250.185.68
Oct 24, 2024 00:45:12.856270075 CEST	443	49829	142.250.185.68	192.168.2.4
Oct 24, 2024 00:45:12.856709003 CEST	443	49829	142.250.185.68	192.168.2.4
Oct 24, 2024 00:45:12.859646082 CEST	49829	443	192.168.2.4	142.250.185.68
Oct 24, 2024 00:45:12.859730959 CEST	443	49829	142.250.185.68	192.168.2.4
Oct 24, 2024 00:45:12.910983086 CEST	49829	443	192.168.2.4	142.250.185.68
Oct 24, 2024 00:45:14.094863892 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:14.095706940 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:14.095733881 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:14.096563101 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:14.096613884 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:14.096621990 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:14.096874952 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:14.097472906 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:14.097486019 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:14.098519087 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:14.098529100 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:14.098721981 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:14.098746061 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:14.099504948 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:14.099509954 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:14.105794907 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:14.106806040 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:14.106838942 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:14.107645988 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:14.107659101 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:14.108835936 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:14.109568119 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:14.109591961 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:14.110167980 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:14.110177040 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:14.226322889 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:14.226418018 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:14.226481915 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:14.227003098 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:14.227025986 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:14.227024078 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:14.227039099 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:14.227045059 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:14.227143049 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:14.227195024 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:14.228437901 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:14.228538990 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:14.228610039 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:14.228760958 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:14.228780985 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:14.228792906 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:14.228800058 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:14.233019114 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:14.233042955 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:14.233064890 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:14.233072042 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:14.239922047 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:14.239965916 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:14.240032911 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:14.240113974 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:14.240372896 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:14.240427017 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:14.242698908 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:14.242727995 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:14.242798090 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:14.243208885 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:14.243221998 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:14.243480921 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:14.243498087 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:14.243510008 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:14.243515015 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:14.244856119 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:14.245117903 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:14.245332003 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:14.245711088 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:14.245723963 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:14.247176886 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:14.247209072 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:14.247323990 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:14.248320103 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:14.248336077 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:14.250006914 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:14.250017881 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:14.250274897 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:14.250427008 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:14.250437021 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:14.250520945 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:14.250533104 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:14.252305984 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:14.252317905 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:14.252650976 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:14.253055096 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:14.253062963 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:14.978147030 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:14.978792906 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:14.978817940 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:14.979460955 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:14.979468107 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:14.983416080 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:14.983824968 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:14.983840942 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:14.984407902 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:14.984414101 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:14.987226009 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:14.987580061 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:14.987597942 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:14.988087893 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:14.988092899 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:14.995712042 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:14.996145010 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:14.996170044 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:14.996629000 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:14.996634960 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:15.108906031 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:15.109081984 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:15.109172106 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:15.109375954 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:15.109397888 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:15.109419107 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:15.109426022 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:15.112890005 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:15.113102913 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:15.113209963 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:15.113475084 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:15.113493919 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:15.113503933 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:15.113509893 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:15.113594055 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:15.113641977 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:15.113723993 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:15.113858938 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:15.113874912 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:15.116461039 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:15.116513014 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:15.116590977 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:15.116707087 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:15.116722107 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:15.116974115 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:15.117049932 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:15.117177963 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:15.117208004 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:15.117221117 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:15.117259026 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:15.117264986 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:15.119497061 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:15.119524002 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:15.119592905 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:15.119770050 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:15.119780064 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:15.130626917 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:15.130709887 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:15.130759954 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:15.131021023 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:15.131043911 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:15.131056070 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:15.131062031 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:15.133784056 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:15.133799076 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:15.133948088 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:15.134130955 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:15.134140015 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:15.852611065 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:15.853157997 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:15.853172064 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:15.853773117 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:15.853777885 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:15.854351997 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:15.854796886 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:15.854806900 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:15.855272055 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:15.855276108 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:15.859497070 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:15.859874010 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:15.859900951 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:15.860265017 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:15.860270023 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:15.876842022 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:15.877459049 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:15.877469063 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:15.877906084 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:15.877911091 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:15.978166103 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:15.978960037 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:15.978974104 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:15.979424000 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:15.979429007 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:15.982059956 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:15.982306957 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:15.982398987 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:15.982455969 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:15.982470989 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:15.982480049 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:15.982486010 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:15.985460043 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:15.985507965 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:15.985589981 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:15.985764980 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:15.985780954 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:15.987884998 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:15.987994909 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:15.988097906 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:15.988245964 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:15.988255024 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:15.988286018 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:15.988291025 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:15.990988016 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:15.991017103 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:15.991095066 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:15.991246939 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:15.991261005 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:15.991483927 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:15.991573095 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:15.991642952 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:15.991678953 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:15.991698027 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:15.991709948 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:15.991715908 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:15.994026899 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:15.994041920 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:15.994105101 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:15.994275093 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:15.994283915 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:16.107420921 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:16.107793093 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:16.107856989 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:16.107909918 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:16.107933044 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:16.107944965 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:16.107950926 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:16.111116886 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:16.111160040 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:16.111296892 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:16.111481905 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:16.111499071 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:16.123769045 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:16.124068975 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:16.124191999 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:16.124242067 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:16.124259949 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:16.124269962 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:16.124278069 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:16.126976013 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:16.127012014 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:16.127068043 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:16.127206087 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:16.127217054 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:16.708045959 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:16.708590984 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:16.708619118 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:16.709170103 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:16.709173918 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:16.732042074 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:16.732713938 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:16.732738018 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:16.733349085 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:16.733355999 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:16.737862110 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:16.738358021 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:16.738373995 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:16.738972902 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:16.738977909 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:16.839796066 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:16.839869976 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:16.840037107 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:16.840142965 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:16.840166092 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:16.840181112 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:16.840188026 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:16.843255997 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:16.843580008 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:16.843631983 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:16.843799114 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:16.843969107 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:16.843986034 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:16.844111919 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:16.844127893 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:16.844551086 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:16.844558954 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:16.868249893 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:16.868381023 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:16.868457079 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:16.868573904 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:16.868592024 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:16.868603945 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:16.868608952 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:16.870506048 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:16.871017933 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:16.871032000 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:16.871586084 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:16.871593952 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:16.871822119 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:16.871853113 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:16.871974945 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:16.872068882 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:16.872076988 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:16.872709036 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:16.872807980 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:16.872858047 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:16.872910976 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:16.872922897 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:16.872935057 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:16.872940063 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:16.875330925 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:16.875365019 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:16.875468016 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:16.876292944 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:16.876305103 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:16.977452040 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:16.977763891 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:16.977900982 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:16.977947950 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:16.977965117 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:16.977976084 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:16.977982044 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:16.980772018 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:16.980817080 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:16.981060028 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:16.981205940 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:16.981221914 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:17.006834030 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:17.007107973 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:17.007272005 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:17.007343054 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:17.007360935 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:17.007397890 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:17.007405043 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:17.010142088 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:17.010184050 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:17.010395050 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:17.010531902 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:17.010544062 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:17.596107006 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:17.596720934 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:17.596740007 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:17.597279072 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:17.597285986 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:17.622009039 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:17.622534990 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:17.622550011 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:17.623048067 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:17.623053074 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:17.624114990 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:17.624540091 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:17.624557972 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:17.624938011 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:17.624946117 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:17.730752945 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:17.730846882 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:17.731002092 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:17.731056929 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:17.731086969 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:17.731101990 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:17.731111050 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:17.734178066 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:17.734214067 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:17.734277964 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:17.734272957 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:17.734466076 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:17.734478951 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:17.734736919 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:17.734744072 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:17.735229015 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:17.735234976 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:17.757797956 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:17.758137941 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:17.758323908 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:17.758382082 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:17.758382082 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:17.758404970 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:17.758414030 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:17.759229898 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:17.759252071 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:17.759371996 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:17.759381056 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:17.759511948 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:17.759591103 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:17.759624958 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:17.759634972 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:17.759644985 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:17.759649992 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:17.759865046 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:17.760423899 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:17.760452986 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:17.761169910 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:17.761178017 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:17.762156010 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:17.762192965 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:17.762389898 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:17.762403965 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:17.762417078 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:17.762444973 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:17.762593985 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:17.762593985 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:17.762612104 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:17.762626886 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:17.868521929 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:17.868633032 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:17.868740082 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:17.868839025 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:17.868860006 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:17.868871927 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:17.868879080 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:17.871810913 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:17.871835947 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:17.872104883 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:17.872104883 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:17.872137070 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:17.896493912 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:17.896756887 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:17.896820068 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:17.896851063 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:17.896876097 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:17.896888018 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:17.896893978 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:17.899701118 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:17.899732113 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:17.899796009 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:17.899956942 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:17.899971008 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:18.488540888 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:18.490319014 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:18.490343094 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:18.491400957 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:18.491408110 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:18.502054930 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:18.503118038 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:18.503132105 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:18.504276037 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:18.504287004 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:18.511352062 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:18.512259960 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:18.512279987 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:18.513339996 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:18.513350010 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:18.614419937 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:18.627089977 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:18.627114058 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:18.627172947 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:18.627178907 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:18.627228022 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:18.638468027 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:18.638796091 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:18.638819933 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:18.638936043 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:18.638968945 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:18.639138937 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:18.639187098 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:18.641143084 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:18.641166925 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:18.642350912 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:18.642357111 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:18.642730951 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:18.642755032 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:18.642770052 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:18.642775059 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:18.644464016 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:18.644480944 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:18.644494057 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:18.644500017 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:18.646866083 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:18.646888971 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:18.647598982 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:18.647609949 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:18.652404070 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:18.652430058 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:18.652508020 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:18.653139114 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:18.653155088 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:18.653691053 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:18.653729916 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:18.653800964 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:18.654329062 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:18.654345989 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:18.657839060 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:18.657861948 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:18.657921076 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:18.657932997 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:18.658057928 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:18.658130884 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:18.658945084 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:18.658962011 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:18.658979893 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:18.658988953 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:18.663225889 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:18.663256884 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:18.663352966 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:18.663516045 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:18.663531065 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:18.771284103 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:18.771370888 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:18.771585941 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:18.771784067 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:18.771806002 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:18.771819115 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:18.771826029 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:18.775213957 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:18.775262117 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:18.775336027 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:18.775383949 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:18.775657892 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:18.775670052 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:18.775681019 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:18.775711060 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:18.776190042 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:18.776215076 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:18.776237011 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:18.776242971 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:18.780014038 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:18.780054092 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:18.780320883 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:18.780481100 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:18.780497074 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:19.393433094 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:19.400080919 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:19.400087118 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:19.400116920 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:19.401031971 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:19.401784897 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:19.401792049 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:19.431826115 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:19.431857109 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:19.433166981 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:19.433173895 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:19.442073107 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:19.450639009 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:19.450675964 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:19.451720953 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:19.451738119 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:19.527760029 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:19.528419971 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:19.528439045 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:19.529133081 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:19.529139042 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:19.530081987 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:19.531193018 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:19.531254053 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:19.531364918 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:19.531379938 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:19.531394005 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:19.531399965 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:19.534431934 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:19.535191059 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:19.535200119 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:19.536180019 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:19.536195040 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:19.536806107 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:19.536834955 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:19.536922932 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:19.537189007 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:19.537203074 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:19.561614990 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:19.562012911 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:19.562077045 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:19.562308073 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:19.562308073 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:19.562330961 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:19.562341928 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:19.567240953 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:19.567279100 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:19.567342997 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:19.567977905 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:19.567990065 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:19.581234932 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:19.581305027 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:19.581367970 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:19.581496000 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:19.581511974 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:19.581525087 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:19.581530094 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:19.586514950 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:19.586538076 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:19.586627960 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:19.586879969 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:19.586894035 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:19.667434931 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:19.667515039 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:19.667644978 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:19.670145988 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:19.670170069 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:19.670181036 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:19.670187950 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:19.673350096 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:19.673422098 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:19.673593044 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:19.677725077 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:19.677725077 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:19.677745104 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:19.677757978 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:19.681739092 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:19.681786060 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:19.681926012 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:19.682616949 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:19.682631969 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:19.684190989 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:19.684238911 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:19.684302092 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:19.684578896 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:19.684597015 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:20.313632011 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:20.314240932 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:20.314279079 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:20.314763069 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:20.314774036 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:20.329430103 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:20.330002069 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:20.330030918 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:20.330476999 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:20.330486059 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:20.331650972 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:20.332870007 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:20.332896948 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:20.333636045 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:20.333642960 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:20.419071913 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:20.419512987 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:20.419542074 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:20.420615911 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:20.420630932 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:20.429322958 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:20.430429935 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:20.430442095 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:20.431241035 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:20.431245089 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:20.462294102 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:20.462455988 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:20.462546110 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:20.463001013 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:20.463018894 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:20.463030100 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:20.463037968 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:20.463284016 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:20.463378906 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:20.463430882 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:20.465831995 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:20.465846062 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:20.465884924 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:20.465890884 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:20.472707987 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:20.472743988 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:20.472820997 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:20.475074053 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:20.475115061 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:20.475227118 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:20.475431919 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:20.475457907 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:20.475898027 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:20.475914955 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:20.538681984 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:20.538791895 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:20.538867950 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:20.544476986 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:20.544491053 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:20.544500113 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:20.544504881 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:20.549803019 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:20.549845934 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:20.549984932 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:20.550507069 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:20.550524950 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:20.552491903 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:20.552525043 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:20.552572966 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:20.552630901 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:20.552797079 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:20.552814007 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:20.552843094 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:20.552848101 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:20.556546926 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:20.556571960 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:20.556648016 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:20.556972027 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:20.556986094 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:20.560726881 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:20.560805082 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:20.560990095 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:20.561104059 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:20.561121941 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:20.561132908 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:20.561137915 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:20.564706087 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:20.564733028 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:20.564857006 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:20.565135002 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:20.565150976 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:20.622183084 CEST	49758	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:45:20.622389078 CEST	443	49758	172.217.18.110	192.168.2.4
Oct 24, 2024 00:45:20.622453928 CEST	49758	443	192.168.2.4	172.217.18.110
Oct 24, 2024 00:45:22.083892107 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.084784031 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.085135937 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:22.085154057 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.085827112 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:22.085833073 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.085912943 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.086467981 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:22.086483955 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.086975098 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:22.086981058 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.087110996 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:22.087127924 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.087263107 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.087569952 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:22.087574959 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.088027954 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:22.088038921 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.088603020 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:22.088608980 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.215193987 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.215221882 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.215267897 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.215320110 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:22.215364933 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:22.215838909 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:22.215852976 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.215879917 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:22.215887070 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.216149092 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.216237068 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.216305971 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:22.216480970 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:22.216499090 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.216511011 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:22.216517925 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.217075109 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.217433929 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.217504025 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:22.218228102 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:22.218241930 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.218261957 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:22.218266964 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.218556881 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.218682051 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.218739033 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:22.219089985 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:22.219098091 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.219120026 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:22.219125032 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.221518993 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:22.221539021 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.221632957 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:22.221659899 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.221683025 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:22.221750975 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:22.222728014 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:22.222748041 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.222873926 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:22.222887039 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.222908974 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:22.222964048 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:22.222981930 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.223190069 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:22.223203897 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:22.223215103 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.223216057 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.223301888 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:22.223659039 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:22.223669052 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.325799942 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.326684952 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:22.326716900 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.326961994 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:22.326970100 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.458447933 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.458632946 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.458684921 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.458708048 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:22.458770037 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:22.458978891 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:22.458997965 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.459021091 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:22.459028006 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.463274002 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:22.463346004 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.463424921 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:22.463691950 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:22.463706017 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.833494902 CEST	443	49829	142.250.185.68	192.168.2.4
Oct 24, 2024 00:45:22.833559036 CEST	443	49829	142.250.185.68	192.168.2.4
Oct 24, 2024 00:45:22.833724022 CEST	49829	443	192.168.2.4	142.250.185.68
Oct 24, 2024 00:45:22.950489044 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.951205015 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:22.951224089 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.951777935 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:22.951782942 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.965720892 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.966316938 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:22.966341972 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.966809034 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:22.966811895 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.966813087 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.967221022 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:22.967246056 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.967755079 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:22.967761040 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.972223043 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.972614050 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:22.972640038 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:22.973107100 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:22.973113060 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.079916954 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.079988003 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.080090046 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:23.080313921 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:23.080332041 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.080341101 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:23.080347061 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.084182978 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:23.084230900 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.084302902 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:23.084517956 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:23.084532022 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.096812010 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.096837044 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.096884966 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.096926928 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:23.096982956 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:23.097193956 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:23.097220898 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.097235918 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:23.097245932 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.100012064 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.100210905 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.100274086 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:23.102185965 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:23.102216959 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.102332115 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:23.102464914 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.102550983 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.102605104 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:23.102691889 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:23.102704048 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.103034973 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:23.103053093 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.104707956 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:23.104718924 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.108572006 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:23.108603954 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.108740091 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:23.109622955 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:23.109637976 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.110794067 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:23.110821962 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.110944033 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:23.111299992 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:23.111320019 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.207983971 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.209311008 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:23.209336042 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.210017920 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:23.210025072 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.347538948 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.347609997 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.347884893 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:23.347995043 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:23.348014116 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.348028898 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:23.348037958 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.351427078 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:23.351459026 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.351537943 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:23.351708889 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:23.351718903 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.822323084 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.823062897 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:23.823096991 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.823585033 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:23.823590040 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.831536055 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.832022905 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:23.832037926 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.832503080 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:23.832508087 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.840133905 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.840537071 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:23.840559959 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.840972900 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:23.840981007 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.862842083 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.863442898 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:23.863466978 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.863949060 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:23.863954067 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.955910921 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.956487894 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.956531048 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.956598043 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:23.956643105 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:23.956660032 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.956671953 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:23.956679106 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.960405111 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:23.960444927 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.960549116 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:23.960726976 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:23.960743904 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.978595018 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.978677034 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.978940010 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:23.979151964 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:23.979151964 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:23.979171038 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.979182005 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.982507944 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:23.982538939 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.982604980 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:23.982847929 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:23.982860088 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.985384941 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.985584021 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.985774994 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:23.985807896 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:23.985825062 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.985840082 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:23.985846996 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.988326073 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:23.988353968 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:23.988545895 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:23.988545895 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:23.988574028 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:24.002681017 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:24.002743959 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:24.002866030 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:24.002990007 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:24.003024101 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:24.003040075 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:24.003051043 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:24.006616116 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:24.006644964 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:24.006846905 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:24.006846905 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:24.006872892 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:24.119966984 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:24.120626926 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:24.120641947 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:24.121329069 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:24.121340036 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:24.276915073 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:24.276947975 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:24.277008057 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:24.277054071 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:24.277084112 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:24.277441978 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:24.277441978 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:24.277456045 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:24.277470112 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:24.280895948 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:24.280945063 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:24.281124115 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:24.281344891 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:24.281363010 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:24.616378069 CEST	49829	443	192.168.2.4	142.250.185.68
Oct 24, 2024 00:45:24.616394043 CEST	443	49829	142.250.185.68	192.168.2.4
Oct 24, 2024 00:45:24.693958044 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:24.694545031 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:24.694560051 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:24.695362091 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:24.695368052 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:24.720107079 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:24.720319033 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:24.720614910 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:24.720635891 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:24.721210003 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:24.721240997 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:24.721281052 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:24.721286058 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:24.721935034 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:24.721951008 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:24.750097990 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:24.750673056 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:24.750683069 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:24.751410007 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:24.751415014 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:24.824954033 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:24.825084925 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:24.825278044 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:24.825604916 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:24.825604916 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:24.825624943 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:24.825635910 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:24.829955101 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:24.829988956 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:24.830406904 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:24.830599070 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:24.830610991 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:24.851377964 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:24.851485014 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:24.851558924 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:24.851876974 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:24.851876974 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:24.851891994 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:24.851901054 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:24.854089022 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:24.854154110 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:24.854276896 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:24.854509115 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:24.854510069 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:24.854531050 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:24.854545116 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:24.856028080 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:24.856065989 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:24.857517958 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:24.857544899 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:24.857563019 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:24.857829094 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:24.857830048 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:24.857831001 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:24.857840061 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:24.857853889 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:24.912436008 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:24.912470102 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:24.912540913 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:24.912604094 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:24.912642956 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:24.913132906 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:24.913151979 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:24.913182974 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:24.913188934 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:24.918272018 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:24.918315887 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:24.918426991 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:24.918704033 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:24.918719053 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:25.037631989 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:25.038764954 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:25.038789988 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:25.039441109 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:25.039452076 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:25.173084974 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:25.173147917 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:25.173280001 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:25.173475027 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:25.173491955 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:25.173506021 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:25.173512936 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:25.177105904 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:25.177150011 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:25.177238941 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:25.177489042 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:25.177504063 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:25.562648058 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:25.563350916 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:25.563369036 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:25.564147949 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:25.564153910 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:25.593774080 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:25.594324112 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:25.594348907 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:25.595072985 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:25.595078945 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:25.595928907 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:25.596369982 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:25.596386909 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:25.596787930 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:25.596792936 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:25.654583931 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:25.655360937 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:25.655389071 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:25.655915022 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:25.655921936 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:25.697221041 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:25.697669029 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:25.697722912 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:25.702779055 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:25.702809095 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:25.702912092 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:25.702922106 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:25.710501909 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:25.710541964 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:25.711633921 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:25.712136984 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:25.712148905 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:25.728487015 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:25.728568077 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:25.728616953 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:25.728775024 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:25.728790045 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:25.728799105 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:25.728806019 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:25.732526064 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:25.732557058 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:25.732606888 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:25.732610941 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:25.733633041 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:25.736073971 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:25.736099005 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:25.736113071 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:25.736119032 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:25.739309072 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:25.739327908 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:25.739444017 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:25.749660969 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:25.749699116 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:25.749794006 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:25.750200033 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:25.750212908 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:25.750425100 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:25.750443935 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:25.787652016 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:25.787714958 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:25.787790060 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:25.791378021 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:25.791378021 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:25.791402102 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:25.791412115 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:25.804152012 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:25.804188967 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:25.804275990 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:25.804409027 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:25.804421902 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:25.914141893 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:25.914695024 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:25.914715052 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:25.915246010 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:25.915251017 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:26.048738003 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:26.048804998 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:26.048932076 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:26.049128056 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:26.049143076 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:26.049154997 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:26.049161911 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:26.052437067 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:26.052489996 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:26.052565098 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:26.052736998 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:26.052752018 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:26.448487043 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:26.449131012 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:26.449172974 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:26.449722052 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:26.449728012 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:26.485025883 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:26.485661030 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:26.485694885 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:26.485759020 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:26.486177921 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:26.486183882 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:26.486449003 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:26.486469030 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:26.486824989 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:26.486829996 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:26.549097061 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:26.550314903 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:26.550314903 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:26.550328970 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:26.550347090 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:26.579904079 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:26.580007076 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:26.580265999 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:26.580670118 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:26.580686092 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:26.585427999 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:26.585460901 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:26.585632086 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:26.586220980 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:26.586234093 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:26.617089033 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:26.617260933 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:26.617352962 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:26.617547035 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:26.617561102 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:26.617592096 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:26.617599010 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:26.619788885 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:26.619824886 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:26.619863987 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:26.619904995 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:26.619960070 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:26.620254993 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:26.620273113 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:26.620289087 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:26.620294094 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:26.621117115 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:26.621148109 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:26.621206999 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:26.621419907 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:26.621433020 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:26.622833967 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:26.622862101 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:26.623091936 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:26.623091936 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:26.623120070 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:26.684650898 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:26.684727907 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:26.684847116 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:26.685019016 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:26.685019016 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:26.685913086 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:26.685930967 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:26.688122988 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:26.688155890 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:26.688375950 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:26.688375950 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:26.688405991 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:26.776009083 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:26.777090073 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:26.777090073 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:26.777142048 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:26.777163982 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:26.912772894 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:26.912853956 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:26.913156033 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:26.913156033 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:26.913425922 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:26.913450003 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:26.916521072 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:26.916574001 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:26.916826963 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:26.916826963 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:26.916865110 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:27.332847118 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:27.333669901 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:27.333678961 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:27.334239960 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:27.334244967 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:27.354332924 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:27.354938984 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:27.354955912 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:27.355607986 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:27.355654001 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:27.355659008 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:27.356359005 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:27.356359005 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:27.356385946 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:27.356395960 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:27.432297945 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:27.433249950 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:27.433264017 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:27.433564901 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:27.433569908 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:27.472747087 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:27.473050117 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:27.473110914 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:27.473123074 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:27.473217964 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:27.473217964 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:27.473368883 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:27.473392010 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:27.476428986 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:27.476463079 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:27.476794004 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:27.476794004 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:27.476823092 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:27.484244108 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:27.484283924 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:27.484328032 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:27.484435081 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:27.484627962 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:27.484627962 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:27.484644890 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:27.484657049 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:27.485795975 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:27.485856056 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:27.485928059 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:27.486186028 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:27.486186981 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:27.486202002 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:27.486215115 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:27.488123894 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:27.488121986 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:27.488149881 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:27.488157988 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:27.488224030 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:27.488228083 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:27.488382101 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:27.488389969 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:27.488401890 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:27.488401890 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:27.564620018 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:27.564690113 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:27.564985037 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:27.564985037 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:27.565054893 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:27.565069914 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:27.568120003 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:27.568170071 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:27.568370104 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:27.568464041 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:27.568475008 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:27.662008047 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:27.662628889 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:27.662647963 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:27.663338900 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:27.663350105 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:27.795995951 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:27.796022892 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:27.796073914 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:27.796086073 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:27.796128035 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:27.796478987 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:27.796478987 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:27.796497107 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:27.796508074 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:27.799823046 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:27.799850941 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 24, 2024 00:45:27.799995899 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:27.800158978 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 24, 2024 00:45:27.800177097 CEST	443	49908	13.107.246.45	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 24, 2024 00:44:08.287415981 CEST	53	50555	1.1.1.1	192.168.2.4
Oct 24, 2024 00:44:08.288585901 CEST	53	64005	1.1.1.1	192.168.2.4
Oct 24, 2024 00:44:09.550173998 CEST	53	61143	1.1.1.1	192.168.2.4
Oct 24, 2024 00:44:10.038561106 CEST	63619	53	192.168.2.4	1.1.1.1
Oct 24, 2024 00:44:10.038743019 CEST	58038	53	192.168.2.4	1.1.1.1
Oct 24, 2024 00:44:10.089463949 CEST	53	58038	1.1.1.1	192.168.2.4
Oct 24, 2024 00:44:10.118052006 CEST	53	63619	1.1.1.1	192.168.2.4
Oct 24, 2024 00:44:11.638030052 CEST	53195	53	192.168.2.4	1.1.1.1
Oct 24, 2024 00:44:11.638199091 CEST	60261	53	192.168.2.4	1.1.1.1
Oct 24, 2024 00:44:11.649631023 CEST	53	60261	1.1.1.1	192.168.2.4
Oct 24, 2024 00:44:11.659980059 CEST	53	53195	1.1.1.1	192.168.2.4
Oct 24, 2024 00:44:11.927427053 CEST	51871	53	192.168.2.4	1.1.1.1
Oct 24, 2024 00:44:11.927599907 CEST	53063	53	192.168.2.4	1.1.1.1
Oct 24, 2024 00:44:11.935544014 CEST	53	51871	1.1.1.1	192.168.2.4
Oct 24, 2024 00:44:11.935560942 CEST	53	53063	1.1.1.1	192.168.2.4
Oct 24, 2024 00:44:12.282383919 CEST	57764	53	192.168.2.4	1.1.1.1
Oct 24, 2024 00:44:12.282540083 CEST	60164	53	192.168.2.4	1.1.1.1
Oct 24, 2024 00:44:12.290146112 CEST	53	60164	1.1.1.1	192.168.2.4
Oct 24, 2024 00:44:12.290605068 CEST	53	57764	1.1.1.1	192.168.2.4
Oct 24, 2024 00:44:12.299588919 CEST	59392	53	192.168.2.4	1.1.1.1
Oct 24, 2024 00:44:12.299792051 CEST	49664	53	192.168.2.4	1.1.1.1
Oct 24, 2024 00:44:12.300261974 CEST	59594	53	192.168.2.4	1.1.1.1
Oct 24, 2024 00:44:12.300422907 CEST	55982	53	192.168.2.4	1.1.1.1
Oct 24, 2024 00:44:12.308187008 CEST	53	59594	1.1.1.1	192.168.2.4
Oct 24, 2024 00:44:12.308202982 CEST	53	55982	1.1.1.1	192.168.2.4
Oct 24, 2024 00:44:12.348870993 CEST	53	49664	1.1.1.1	192.168.2.4
Oct 24, 2024 00:44:12.358259916 CEST	53	59392	1.1.1.1	192.168.2.4
Oct 24, 2024 00:44:12.559195042 CEST	52549	53	192.168.2.4	1.1.1.1
Oct 24, 2024 00:44:12.559614897 CEST	50783	53	192.168.2.4	1.1.1.1
Oct 24, 2024 00:44:12.567262888 CEST	53	52549	1.1.1.1	192.168.2.4
Oct 24, 2024 00:44:12.568583012 CEST	53	50783	1.1.1.1	192.168.2.4
Oct 24, 2024 00:44:13.416218996 CEST	56973	53	192.168.2.4	1.1.1.1
Oct 24, 2024 00:44:13.416423082 CEST	50273	53	192.168.2.4	1.1.1.1
Oct 24, 2024 00:44:13.423564911 CEST	53	56973	1.1.1.1	192.168.2.4
Oct 24, 2024 00:44:13.423695087 CEST	53	50273	1.1.1.1	192.168.2.4
Oct 24, 2024 00:44:14.487417936 CEST	58782	53	192.168.2.4	1.1.1.1
Oct 24, 2024 00:44:14.488950968 CEST	58109	53	192.168.2.4	1.1.1.1
Oct 24, 2024 00:44:14.496349096 CEST	53	58782	1.1.1.1	192.168.2.4
Oct 24, 2024 00:44:14.497845888 CEST	53	58109	1.1.1.1	192.168.2.4
Oct 24, 2024 00:44:14.563689947 CEST	62695	53	192.168.2.4	1.1.1.1
Oct 24, 2024 00:44:14.564232111 CEST	64493	53	192.168.2.4	1.1.1.1
Oct 24, 2024 00:44:14.573457956 CEST	53	64493	1.1.1.1	192.168.2.4
Oct 24, 2024 00:44:14.573472977 CEST	53	62695	1.1.1.1	192.168.2.4
Oct 24, 2024 00:44:18.517313957 CEST	49933	53	192.168.2.4	1.1.1.1
Oct 24, 2024 00:44:18.518945932 CEST	52604	53	192.168.2.4	1.1.1.1
Oct 24, 2024 00:44:18.527463913 CEST	53	49933	1.1.1.1	192.168.2.4
Oct 24, 2024 00:44:18.529872894 CEST	53	52604	1.1.1.1	192.168.2.4
Oct 24, 2024 00:44:19.372173071 CEST	55943	53	192.168.2.4	1.1.1.1
Oct 24, 2024 00:44:19.372880936 CEST	54254	53	192.168.2.4	1.1.1.1
Oct 24, 2024 00:44:19.381726027 CEST	53	55943	1.1.1.1	192.168.2.4
Oct 24, 2024 00:44:19.422342062 CEST	53	54254	1.1.1.1	192.168.2.4
Oct 24, 2024 00:44:22.579972982 CEST	138	138	192.168.2.4	192.168.2.255
Oct 24, 2024 00:44:23.058859110 CEST	59007	53	192.168.2.4	1.1.1.1
Oct 24, 2024 00:44:23.059122086 CEST	61763	53	192.168.2.4	1.1.1.1
Oct 24, 2024 00:44:23.102385044 CEST	53	59007	1.1.1.1	192.168.2.4
Oct 24, 2024 00:44:23.103159904 CEST	53	61763	1.1.1.1	192.168.2.4
Oct 24, 2024 00:44:26.634429932 CEST	53	60353	1.1.1.1	192.168.2.4
Oct 24, 2024 00:44:45.358077049 CEST	53	54359	1.1.1.1	192.168.2.4
Oct 24, 2024 00:45:07.635765076 CEST	53	58419	1.1.1.1	192.168.2.4
Oct 24, 2024 00:45:08.326026917 CEST	53	61434	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 24, 2024 00:44:12.290666103 CEST	192.168.2.4	1.1.1.1	c1f4	(Port unreachable)	Destination Unreachable
Oct 24, 2024 00:44:19.422415018 CEST	192.168.2.4	1.1.1.1	c245	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 24, 2024 00:44:10.038561106 CEST	192.168.2.4	1.1.1.1	0xf19f	Standard query (0)	josecarlosrevoredo.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:44:10.038743019 CEST	192.168.2.4	1.1.1.1	0xbec3	Standard query (0)	josecarlosrevoredo.com	65	IN (0x0001)	false
Oct 24, 2024 00:44:11.638030052 CEST	192.168.2.4	1.1.1.1	0x87bf	Standard query (0)	d38psrni17bvxu.cloudfront.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:44:11.638199091 CEST	192.168.2.4	1.1.1.1	0x43bd	Standard query (0)	d38psrni17bvxu.cloudfront.net	65	IN (0x0001)	false
Oct 24, 2024 00:44:11.927427053 CEST	192.168.2.4	1.1.1.1	0xc7a7	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:44:11.927599907 CEST	192.168.2.4	1.1.1.1	0xa9e8	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 24, 2024 00:44:12.282383919 CEST	192.168.2.4	1.1.1.1	0x8fdf	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:44:12.282540083 CEST	192.168.2.4	1.1.1.1	0x73dd	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 24, 2024 00:44:12.299588919 CEST	192.168.2.4	1.1.1.1	0x8601	Standard query (0)	josecarlosrevoredo.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:44:12.299792051 CEST	192.168.2.4	1.1.1.1	0x5d83	Standard query (0)	josecarlosrevoredo.com	65	IN (0x0001)	false
Oct 24, 2024 00:44:12.300261974 CEST	192.168.2.4	1.1.1.1	0x421f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:44:12.300422907 CEST	192.168.2.4	1.1.1.1	0xee95	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 24, 2024 00:44:12.559195042 CEST	192.168.2.4	1.1.1.1	0xcbd4	Standard query (0)	d38psrni17bvxu.cloudfront.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:44:12.559614897 CEST	192.168.2.4	1.1.1.1	0x67d6	Standard query (0)	d38psrni17bvxu.cloudfront.net	65	IN (0x0001)	false
Oct 24, 2024 00:44:13.416218996 CEST	192.168.2.4	1.1.1.1	0x3f60	Standard query (0)	syndicatedsearch.goog	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:44:13.416423082 CEST	192.168.2.4	1.1.1.1	0x1290	Standard query (0)	syndicatedsearch.goog	65	IN (0x0001)	false
Oct 24, 2024 00:44:14.487417936 CEST	192.168.2.4	1.1.1.1	0x6688	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:44:14.488950968 CEST	192.168.2.4	1.1.1.1	0x9270	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 24, 2024 00:44:14.563689947 CEST	192.168.2.4	1.1.1.1	0x5a4f	Standard query (0)	syndicatedsearch.goog	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:44:14.564232111 CEST	192.168.2.4	1.1.1.1	0xb99f	Standard query (0)	syndicatedsearch.goog	65	IN (0x0001)	false
Oct 24, 2024 00:44:18.517313957 CEST	192.168.2.4	1.1.1.1	0xdba8	Standard query (0)	syndicatedsearch.goog	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:44:18.518945932 CEST	192.168.2.4	1.1.1.1	0x395d	Standard query (0)	syndicatedsearch.goog	65	IN (0x0001)	false
Oct 24, 2024 00:44:19.372173071 CEST	192.168.2.4	1.1.1.1	0x246c	Standard query (0)	afs.googleusercontent.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:44:19.372880936 CEST	192.168.2.4	1.1.1.1	0x15e2	Standard query (0)	afs.googleusercontent.com	65	IN (0x0001)	false
Oct 24, 2024 00:44:23.058859110 CEST	192.168.2.4	1.1.1.1	0x8a67	Standard query (0)	afs.googleusercontent.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:44:23.059122086 CEST	192.168.2.4	1.1.1.1	0x8673	Standard query (0)	afs.googleusercontent.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 24, 2024 00:44:10.118052006 CEST	1.1.1.1	192.168.2.4	0xf19f	No error (0)	josecarlosrevoredo.com		52.18.59.124	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:44:11.659980059 CEST	1.1.1.1	192.168.2.4	0x87bf	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.190	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:44:11.659980059 CEST	1.1.1.1	192.168.2.4	0x87bf	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.138	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:44:11.659980059 CEST	1.1.1.1	192.168.2.4	0x87bf	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.69	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:44:11.659980059 CEST	1.1.1.1	192.168.2.4	0x87bf	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.135	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:44:11.935544014 CEST	1.1.1.1	192.168.2.4	0xc7a7	No error (0)	www.google.com		142.250.185.68	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:44:11.935560942 CEST	1.1.1.1	192.168.2.4	0xa9e8	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 24, 2024 00:44:12.290146112 CEST	1.1.1.1	192.168.2.4	0x73dd	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 24, 2024 00:44:12.290605068 CEST	1.1.1.1	192.168.2.4	0x8fdf	No error (0)	www.google.com		142.250.186.68	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:44:12.308187008 CEST	1.1.1.1	192.168.2.4	0x421f	No error (0)	www.google.com		142.250.186.68	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:44:12.308202982 CEST	1.1.1.1	192.168.2.4	0xee95	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 24, 2024 00:44:12.358259916 CEST	1.1.1.1	192.168.2.4	0x8601	No error (0)	josecarlosrevoredo.com		52.18.59.124	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:44:12.567262888 CEST	1.1.1.1	192.168.2.4	0xcbd4	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.135	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:44:12.567262888 CEST	1.1.1.1	192.168.2.4	0xcbd4	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.190	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:44:12.567262888 CEST	1.1.1.1	192.168.2.4	0xcbd4	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.69	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:44:12.567262888 CEST	1.1.1.1	192.168.2.4	0xcbd4	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.138	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:44:13.423564911 CEST	1.1.1.1	192.168.2.4	0x3f60	No error (0)	syndicatedsearch.goog		142.250.185.174	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:44:14.496349096 CEST	1.1.1.1	192.168.2.4	0x6688	No error (0)	www.google.com		172.217.16.196	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:44:14.497845888 CEST	1.1.1.1	192.168.2.4	0x9270	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 24, 2024 00:44:14.573472977 CEST	1.1.1.1	192.168.2.4	0x5a4f	No error (0)	syndicatedsearch.goog		172.217.18.110	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:44:18.527463913 CEST	1.1.1.1	192.168.2.4	0xdba8	No error (0)	syndicatedsearch.goog		142.250.186.110	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:44:19.381726027 CEST	1.1.1.1	192.168.2.4	0x246c	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:44:19.381726027 CEST	1.1.1.1	192.168.2.4	0x246c	No error (0)	googlehosted.l.googleusercontent.com		142.250.181.225	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:44:19.422342062 CEST	1.1.1.1	192.168.2.4	0x15e2	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:44:23.102385044 CEST	1.1.1.1	192.168.2.4	0x8a67	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:44:23.102385044 CEST	1.1.1.1	192.168.2.4	0x8a67	No error (0)	googlehosted.l.googleusercontent.com		142.250.185.65	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:44:23.103159904 CEST	1.1.1.1	192.168.2.4	0x8673	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:44:23.385433912 CEST	1.1.1.1	192.168.2.4	0x31c1	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:44:23.385433912 CEST	1.1.1.1	192.168.2.4	0x31c1	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:44:25.425065994 CEST	1.1.1.1	192.168.2.4	0x27d3	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:44:25.425065994 CEST	1.1.1.1	192.168.2.4	0x27d3	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:44:41.740782022 CEST	1.1.1.1	192.168.2.4	0x73e	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:44:41.740782022 CEST	1.1.1.1	192.168.2.4	0x73e	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:44:59.877023935 CEST	1.1.1.1	192.168.2.4	0x2ba	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:44:59.877023935 CEST	1.1.1.1	192.168.2.4	0x2ba	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:45:21.943510056 CEST	1.1.1.1	192.168.2.4	0x73fb	No error (0)	shed.dual-low.s-part-0036.t-0009.t-msedge.net	s-part-0036.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:45:21.943510056 CEST	1.1.1.1	192.168.2.4	0x73fb	No error (0)	s-part-0036.t-0009.t-msedge.net		13.107.246.64	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

josecarlosrevoredo.com

www.google.com

syndicatedsearch.goog

d38psrni17bvxu.cloudfront.net

fs.microsoft.com

https:

afs.googleusercontent.com

otelrules.azureedge.net

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	52.18.59.124	80	4092	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 00:44:10.126764059 CEST	437	OUT	GET / HTTP/1.1 Host: josecarlosrevoredo.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 24, 2024 00:44:11.362775087 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 23 Oct 2024 22:44:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=5 Vary: Accept-Encoding X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_hBC1wqBu++e685Ozf+E6hRP2MMIO68/5t6wOqJ3oDoJP//u6UYcy32zrk/q1EBzIyDqf+nGU5bPED9FVwzmcMQ== Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 X-Pcrew-Ip-Organization: OMGitsfast X-Pcrew-Blocked-Reason: X-Domain: josecarlosrevoredo.com X-Subdomain: Content-Encoding: gzip Data Raw: 63 63 31 0d 0a 1f 8b 08 00 00 00 00 00 04 03 e5 5b 79 77 da ca 92 ff 3b fe 14 0a 39 cf e0 09 8b c4 62 63 63 92 87 8d 17 7c 03 5e 42 62 9b 9c 4c 8e 90 1a 10 08 89 48 c2 2c f7 f9 bb cf af ba 5b 42 d8 38 2f 79 e7 66 ee 99 33 4e 6c a4 ae ee aa ea ae b5 ab 9b c3 d7 f5 cb e3 f6 fd d5 89 32 08 c6 f6 bb ad 43 fa 50 4c 3d d0 33 ba d9 b5 5d 63 34 62 8b 6a a2 79 3a 9b d5 af ef 2f fe 70 3b 8d c1 83 d1 aa 5d 9f 1c 1d 5d d7 ea 1f 67 b5 d9 c7 da c5 51 ed c3 f7 69 fd f4 a4 7d 77 e3 a8 e7 9e 5a ea 7d ba da 3b b9 68 ef ed cd ef 9d ab f1 4d 77 d2 5c 14 1f 46 e5 3f ee ad 73 67 d4 9a 30 d3 19 5e d6 5a 17 86 7e 57 bf 33 fe b8 be 68 a9 ce dd 1f 9d 8b 0f 7b 6d c3 ba a8 97 6b ee f9 dd 1f 5a a9 7c 5c 9b 9d d4 6a d7 d5 ea b7 c1 d1 b1 36 fb 7e 34 7d fb 96 ed 96 4b 97 cb de db 93 dd c1 cd 55 be d9 6c 5c ee 96 73 a5 60 77 76 f9 fd a2 e0 d6 dd 8b ab 5c 6e ba fb e9 de 58 14 f2 4b 6f 94 fb ae 9d 1c 2d 1b 8b fa f7 de 5b e7 ec 53 a9 7b 75 52 df 3f fd 3c 5b 8e 8d 26 10 27 94 f9 d8 76 fc 6a 62 10 04 93 83 5c 6e 36 9b 65 67 85 ac eb f5 [TRUNCATED] Data Ascii: cc1[yw;9bcc\|^BbLH,[B8/yf3Nl2CPL=3]c4bjy:/p;]]gQi}wZ};hMw\F?sg0^Z~W3h{mkZ\|\j6~4}KUl\s`wv\nXKo-[S{uR?<[&'vjb\n6egs~nNPl
Oct 24, 2024 00:44:11.362818003 CEST	1236	IN	Data Raw: dd e9 57 13 cc 49 d0 0a 31 dd 7c b7 a5 e0 e7 70 cc 02 1d 0b 17 4c 32 ec fb d4 7a a8 26 8e 5d 27 60 4e 90 69 2f 26 2c a1 18 e2 ad 9a 08 d8 3c c8 11 a6 8a 62 0c 74 cf 67 41 75 1a f4 32 e5 44 2e 8e c8 d1 c7 ac 9a 78 b0 d8 6c e2 7a 41 6c f8 cc 32 83 Data Ascii: WI1\|pL2z&]'`Ni/&,<btgAu2D.xlzAl2Ad2%XXfU-rFln==zt;>,lioxO8`N@zv*K>Yvfrh[M(Vy
Oct 24, 2024 00:44:11.362832069 CEST	1236	IN	Data Raw: a1 26 4a c1 c9 04 8d 8f 89 36 17 34 73 4a f3 bc 7e 37 a5 ed a5 95 42 39 ad ec ed ed 88 35 e0 61 71 95 1b 66 30 3b 16 26 88 84 66 e5 ec 14 8d 67 57 51 e3 4c ee 28 f6 54 a9 2e a1 41 4a d6 f8 12 3f 8f ba 50 9d 95 34 b9 8a 4a 77 85 fc 43 87 59 72 cb Data Ascii: &J64sJ~7B95aqf0;&fgWQL(T.AJ?P4JwCYrYzFH-+Xc7[L+]gy+Yz]X-sU3?]6/&@mXG\|j,UK?Q`E\f96oMVsxm5;y-Zy\[
Oct 24, 2024 00:44:11.363013983 CEST	1236	IN	Data Raw: 61 ba ab 7e 47 53 94 42 9c a8 63 e0 4d e3 cb b2 4e 52 f4 25 9a 31 55 14 52 fc 19 95 16 3d 05 7b 11 2a 88 bc 5b c8 ef ed c7 27 ca f5 22 de af 8d 6a 2a c8 26 29 45 4f c6 97 1b fb 1c 6e d1 f0 17 3f 74 03 ef 6c 16 28 96 5f 33 a7 76 50 e5 b2 af 90 bd Data Ascii: a~GSBcMNR%1UR={['"j&)EOn?tl(_3vPE&B_}BofX\Vm:g'qsy['e>jee+1Y#\~52v_oe'F]+%:TO%dwnO>
Oct 24, 2024 00:44:11.363027096 CEST	848	IN	Data Raw: f3 3a de c8 a7 83 89 3c 6b 83 78 e2 6d 34 f8 39 ca 70 f4 bf d7 f6 ff 74 19 22 ce b7 89 83 97 56 31 ce a9 e4 e9 57 2d 69 87 2b d8 17 0d 35 64 6d ff 6b 96 d7 6d 2e 7b 29 6c 09 7d d6 80 e9 3d 27 b1 43 5a 90 d1 48 41 36 84 3b 19 0d b1 b4 1b 80 5c 63 Data Ascii: :<kxm49pt"V1W-i+5dmkm.{)l}='CZHA6;\c9Ak=s<eR){M`,Dd:D\YcYJ~$k39t4{}=:_.Yorm,&@+fv7Q8{{U2TV6qPqOA!
Oct 24, 2024 00:44:11.363039017 CEST	1052	IN	Data Raw: 5f 2f 51 18 2e 5d d6 6f 46 a8 e1 8d 2f db 47 76 eb f6 13 e0 28 fa b6 51 e1 96 05 d8 ff 3b 05 da 7f 14 ea f8 9f 4c 0f 6c 08 85 39 c9 f4 68 86 87 64 58 80 c1 d3 d4 a2 f2 10 55 e1 64 fd 8d be 11 e1 38 8c 06 74 a7 c6 08 55 3f 75 2f 2d 9f 34 2d 7c 2a Data Ascii: _/Q.]oF/Gv(Q;Ll9hdXUd8tU?u/-4-\|*'c(bO'8s(TaMK$MzK:D7.@5,UrtT-amfq5;0Q{my@:<";/_gmAR3Z.^[N ]XSGNI
Oct 24, 2024 00:44:11.651418924 CEST	501	OUT	GET /track.php?domain=josecarlosrevoredo.com&toggle=browserjs&uid=MTcyOTcyMzQ1MS4xNTg6NWNhZGExMWVmMjVjNmRmNWE1ODY2NTY2MmRhODIyZDg4ZmM2NTEzN2JjZjM3MGI2MzU1YzAxNTc4MTg0YTc1OTo2NzE5N2MzYjI2OTA5 HTTP/1.1 Host: josecarlosrevoredo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://josecarlosrevoredo.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 24, 2024 00:44:12.251014948 CEST	603	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 23 Oct 2024 22:44:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Custom-Track: browserjs Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49739	18.66.121.190	80	4092	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 00:44:11.676769018 CEST	435	OUT	GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1 Host: d38psrni17bvxu.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://josecarlosrevoredo.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 24, 2024 00:44:12.508733034 CEST	1236	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 11375 Connection: keep-alive Server: nginx Date: Wed, 23 Oct 2024 11:04:55 GMT Last-Modified: Thu, 21 Mar 2024 11:48:11 GMT Accept-Ranges: bytes ETag: "65fc1e7b-2c6f" X-Cache: Hit from cloudfront Via: 1.1 f49c99d2326b14738507e1c2ddcae1dc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P2 X-Amz-Cf-Id: aUT200cWKEewVj_T-c6iqLGoLcijyXjGSzUeYFbG6okHOtVMbbd3fg== Age: 41957 Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 dc 00 00 02 58 08 03 00 00 00 4f 6d d4 16 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 00 50 4c 54 45 00 00 00 ff ff ff 63 64 74 49 4b 5e 49 4b 5d 49 4b 5c 30 33 49 48 4b 5f 61 63 73 63 65 75 62 64 74 63 65 74 15 19 30 3d 40 53 48 4b 5d 49 4c 5d 48 4b 5c 4d 50 62 4e 51 62 4f 52 63 12 17 2e 14 19 30 22 26 3b 28 2c 40 2b 2f 42 30 34 49 2e 32 46 2f 33 47 2d 31 44 30 34 48 2e 32 45 30 34 47 31 35 48 32 36 49 35 39 4c 38 3c 50 36 3a 4d 39 3d 51 37 3b 4e 3a 3e 52 3a 3e 51 3b 3f 52 3c 40 53 49 4c 5c 62 65 75 61 64 74 62 65 74 63 66 74 62 65 73 13 18 2d 15 1a 30 1b 20 35 1c 21 36 1d 22 37 1e 23 38 1d 22 36 1f 24 39 20 25 3a 21 26 3b 22 27 3c 22 27 3b 24 29 3e 23 28 3c 25 2a 3f 24 29 3d 26 2b 40 25 2a 3e 27 2c 41 26 2b 3f 28 2d 42 29 2e 43 28 2d 41 29 2e 42 2a 2f 43 2b 30 44 2c 31 45 30 35 49 31 35 47 3c 40 52 3d 41 53 49 4d 5f 48 4c 5d 4b 4f 60 48 4c 5c 4d 51 62 61 65 75 11 17 [TRUNCATED] Data Ascii: PNGIHDRXOmtEXtSoftwareAdobe ImageReadyqe<PLTEcdtIK^IK]IK\03IHK_acsceubdtcet0=@SHK]IL]HK\MPbNQbORc.0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes-0 5!6"7#8"6$9 %:!&;"'<"';$)>#(<%?$)=&+@%>',A&+?(-B).C(-A).B/C+0D,1E05I15G<@R=ASIM_HL]KO`HL\MQbaeu.-/.0/.0/11234 5!6#8$9%: &;"':$)<&+>',?(-@).A/B+0C,1D/A-2E.3F/4G05H16I/4F05G38K6;N49K;@S;@R<ASGL^bfuaetbft.0!5"6#7$8%9 &:!';"(<!':#)=#)<$=&,@&,?+1E)/B06IGL]GL\HM]bfs-.01 4!5"6#7$8 '< ';*0B.4F06H06G-0!5 (< (;
Oct 24, 2024 00:44:12.508755922 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 15 de 74 00 00 00 b1 74 52 4e 53 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: ttRNS
Oct 24, 2024 00:44:12.508769035 CEST	1236	IN	Data Raw: 4a 68 6f 86 3b bc 13 11 b4 e7 ea e5 53 8d b8 6e 86 bb 74 de ff ea 9a 92 62 21 52 fc 8a 5a 52 7f 28 9a f6 6d 0d b1 6e 8a bb 6c de 37 ef 2d a9 af 20 0f c5 ee 2b 45 2d a9 cd 86 68 f7 c1 5d 32 ef 65 e1 be 77 2f f6 50 e4 ef f6 bd e0 ae 94 76 3f dc e5 Data Ascii: Jho;Sntb!RZR(mnl7- +E-h]2ew/Pv?^NQ+m=}y1Tm{O}q{y;aaioD}Abvwyc2qoG{[;37HD^pM{{e^&x'KP!hKP
Oct 24, 2024 00:44:12.508893967 CEST	1236	IN	Data Raw: 88 bb 52 de cb c5 9d 6b a9 14 ac 6b c0 dd 00 ed 43 70 3f 78 f0 9b bf 52 c7 fb 66 6c 27 42 f7 a0 b8 bf ac 93 f6 a1 b8 2b e4 bd 54 dc e1 88 c2 06 ee 57 69 df a6 94 f6 11 b8 ab e3 bd 4c dc ef c4 22 0a dd 9d e0 ae 9c f6 91 b8 2b e3 7d 33 b6 13 a1 7b Data Ascii: RkkCp?xRfl'B+TWiL"+}3{ U^R{s-nnk~!-ov"to'^w5ov"tokpgEgen}w3rvG}_w49@LiP../k.!.K:?
Oct 24, 2024 00:44:12.509037018 CEST	1236	IN	Data Raw: bc bb fc b4 07 e4 7d 82 ef 76 a2 e0 3d 0a ee cd f6 da 8f af e7 ed 70 41 b8 6f a4 3d 18 ef 13 d8 4e 84 ee 39 71 bf 65 b6 82 b7 c3 85 e0 fe cb 63 d5 05 e0 7d 02 db 89 d0 3d 1f ee 37 cd 0e e0 ed 70 01 b8 0f a2 3d 08 ef 65 e0 0e 35 c4 3f ab 8a c4 fd Data Ascii: }v=pAo=N9qec}=7p=e5?q};(KxwhI`{+(uho}J.Z'IZpM{poB{7{EmiOMi8$t{sS<6ruq_
Oct 24, 2024 00:44:12.509057999 CEST	1236	IN	Data Raw: 18 f7 46 b4 27 e7 bd 9a 76 25 b8 9f fc 1f 56 3a 95 d6 8d 27 d5 e2 9e 98 f7 b7 17 1b d2 3b 90 77 17 86 f6 a4 bc 1f 7f 7e 76 56 33 ee 7c bb 13 df ed 9a 70 4f c8 fb db 0b 1e f4 0e e0 dd 85 a2 3d 19 ef 83 69 57 83 3b 1b ef c4 76 bb 2a dc 13 f1 ee 45 Data Ascii: F'v%V:';w~vV3\|pO=iW;v*E{3p=hW;=wH[k=2h}=gL}wvewx?.~saZx;pQO{wt'lW{w7dwt'l{`
Oct 24, 2024 00:44:12.509068966 CEST	1236	IN	Data Raw: b8 b4 8f e6 7d 0e db 89 e4 65 02 f7 b8 b4 f7 78 f7 1b 19 b9 7f ac 5a f1 01 b8 7b f1 1e 9f f6 51 bc 2b c1 9d 91 03 54 58 2f aa c7 3d 3e ed 9e bc f7 2e a3 36 c3 bd 31 ef 69 68 1f ce bb 0e dc d9 6e a7 e2 fa 48 37 ee 69 68 6f ce fb d9 c1 b4 0f c5 bd Data Ascii: }exZ{Q+TX/=>.61ihnH7ihoh{`\J1wy?+a;=1yAHkA+"3^}$s\|n{&G^Z*rSi{->.w)6
Oct 24, 2024 00:44:12.509082079 CEST	1236	IN	Data Raw: 03 79 cf 41 7b 26 dc ab 79 6f 4d bb 50 dc d1 9d 48 85 ed ed 71 af e4 3d 0f ed d9 70 ef e7 3d 00 ed 52 71 47 77 a2 0d c9 5c a9 0b 21 14 1a 8f f1 cc 92 2a dc d7 f3 1e 84 76 b1 b8 a3 3b 91 02 db c3 e0 be 8e f7 7c b4 67 c5 7d 95 f7 40 b4 cb c5 1d dd Data Ascii: yA{&yoMPHq=p=RqGw\!*v;\|g}@=3KKcw]0N$pxK{v:w?aE-I?tn[G;2D\|=zGDwB{fw'`sHGV/1w?.>"t{
Oct 24, 2024 00:44:12.509448051 CEST	1236	IN	Data Raw: ee 0c d1 1e 15 77 0e cd 10 49 e8 ab d3 99 71 ef f0 2e f7 35 be 27 ab 70 37 40 7b 5c dc f9 78 27 32 bc 25 d3 00 77 25 bc 3b 43 b4 c7 c6 9d 6f 77 22 cb b6 d7 c7 7d 4a f2 63 ab 4f ae c5 dd 08 ed b1 71 47 77 a2 bc bd 26 06 77 d1 13 81 9f fc 78 05 77 Data Ascii: wIq.5'p7@{\x'2%w%;Cow"}JcOqGw&wxw3Gw;?1Np3D{K](3>'`qbG"qD6mG&pGw"O#wgTQ:-w59C'R\|wfm])q
Oct 24, 2024 00:44:12.509460926 CEST	693	IN	Data Raw: 08 de 1b f3 ee a0 9d 88 c8 1c ef ef 39 c9 b4 73 63 89 88 e0 dd 8f 77 07 ed 44 44 9e bc 0b 3e 19 e9 a0 9d 88 c8 1e ef 0e da 89 88 5a 74 1a dc a1 9d 88 e0 bd 5c dc 99 0e 46 44 f0 6e 0e 77 6e 2c 11 11 bc 9b c3 1d da 89 48 69 7f 0b ee d0 4e 44 16 db Data Ascii: 9scwDD>Zt\FDnwn,HiNDNDwh'"x/wF[}%"wsC;tC;tC;9!CDnwDTTDTdqg5@;5DDdwh'"~NDwDD;mND
Oct 24, 2024 00:44:57.510201931 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49736	52.18.59.124	80	4092	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 00:44:12.282658100 CEST	380	OUT	GET /ls.php?t=67197c3b&token=7e73f5f3413db55900d4ec5ccbef1893e626adf4 HTTP/1.1 Host: josecarlosrevoredo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://josecarlosrevoredo.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 24, 2024 00:44:12.891308069 CEST	888	IN	HTTP/1.1 201 Created Server: nginx Date: Wed, 23 Oct 2024 22:44:12 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=5 Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Charset: utf-8 Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Max-Age: 86400 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_HF9V0h7DP+w6jZqcSOF1gweP/YEDtkDwmWoMcZFn8ewmqrDx0YEnoKiIRUIELK49r82jyFplluHIZYqHz/IpHA== Data Raw: 31 30 0d 0a 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 10{"success":true}0
Oct 24, 2024 00:44:14.744932890 CEST	490	OUT	GET /privacy.html HTTP/1.1 Host: josecarlosrevoredo.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Referer: http://josecarlosrevoredo.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 24, 2024 00:44:15.345287085 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 23 Oct 2024 22:44:15 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 06 Aug 2024 11:50:56 GMT Vary: Accept-Encoding ETag: W/"66b20e20-365a" Content-Encoding: gzip Data Raw: 66 31 37 0d 0a 1f 8b 08 00 00 00 00 00 04 03 dd 5b db 6e 1b 49 92 7d 1e 7f 45 0e 1b 83 95 07 12 a9 4b fb 22 59 16 96 2d d2 36 b1 b2 24 50 b4 bd 7e 5a 24 ab 92 64 8d 8a 55 d5 55 45 d1 9c 41 7f da 62 3f 69 7f 61 cf 89 cc ac 0b 45 b9 bd 0d cc cb 74 a3 db 32 99 97 c8 88 13 27 2e 99 3a ff f3 e0 e6 72 f2 f5 76 a8 16 e5 32 56 b7 9f 7e b9 1a 5d aa ce 41 af f7 e5 e4 b2 d7 1b 4c 06 ea 3f 3f 4c 3e 5e a9 a3 ee a1 9a e4 3a 29 a2 32 4a 13 1d f7 7a c3 eb 8e ea 2c ca 32 3b eb f5 d6 eb 75 77 7d d2 4d f3 79 6f 32 ee 7d e3 5a 47 9c ec 7e 3c 28 1b 33 bb 61 19 76 2e 9e 9d cb 86 df 96 71 52 bc dd b1 cc d1 e9 e9 a9 9d dd 51 b1 4e e6 6f 3b 32 c7 e8 10 53 97 a6 d4 10 b8 cc 0e cc af ab e8 e1 6d e7 32 4d 4a 93 94 07 93 4d 66 3a 2a b0 7f 7b db 29 cd b7 b2 c7 7d de a8 60 a1 f3 c2 94 6f 57 e5 ec e0 75 47 f5 b0 4a 19 95 b1 b9 b8 cd a3 07 1d 6c d4 6d 1a 47 c1 e6 bc 67 3f 7d 76 5e 94 9b d8 a8 12 0b ba 75 82 a2 80 08 7a 5f 45 cb b9 fa 87 9a a6 79 68 f2 33 75 f8 46 fd f6 6c 9a 86 1b 7e a6 83 fb 79 9e ae 92 f0 ec 27 73 ca 7f df a8 4c [TRUNCATED] Data Ascii: f17[nI}EK"Y-6$P~Z$dUUEAb?iaEt2'.:rv2V~]AL??L>^:)2Jz,2;uw}Myo2}ZG~<(3av.qRQNo;2Sm2MJMf:{)}`oWuGJlmGg?}v^uz_Eyh3uFl~y'sLa0ny$<eo:LW]g_HLG37no8WO'''o~{]:L%l(,gO_rJpbUbgJ#,65p</PB8Ylf%%l.B&41!"l}K%?Md{yq=G4QAM7,XY}[P[XIb54-8S'U4SU.$)8F0RE=0,_Ks"I<%e.OO8Nnv}QCPERxrqTgn~/k0'S.Bx9yFusf\|o;f\|q\|q;}_~U7exkcp%\|]L:Wt=!"s's.TrL<}CA q\ejp1lQ*&mfUQ9H-(((vjo-J@Yt&7
Oct 24, 2024 00:44:15.345443964 CEST	1236	IN	Data Raw: 08 60 5a 07 e0 99 50 27 01 4e 1e 95 0b 11 a6 28 75 09 16 c4 59 e4 54 8d 63 e7 66 be 8a 85 95 0a 04 80 24 88 57 24 f5 7d 35 c5 31 92 b4 04 44 96 50 64 b8 2f cb 34 06 f3 14 74 95 e1 2a 4f 33 03 d0 be 37 89 c9 a1 b6 01 d5 76 5b eb 75 5c 6d a0 f6 de Data Ascii: `ZP'N(uYTcf$W$}51DPd/4tO37v[u\mn-a2n4`8Vockzsj<W{VAJvWd!r.O+P3Zf9Pp4eg<A/ww7c\|';^Monw7
Oct 24, 2024 00:44:15.345457077 CEST	376	IN	Data Raw: d3 54 81 73 36 09 2e fc 3b 03 da 4e 15 5a d2 f4 c3 6b 16 6c 8f 47 92 e0 55 ce 8c 51 3b b7 77 c8 22 be 2d e4 2a d7 a8 04 a8 21 90 5d dc c1 4a f0 49 05 a3 81 9c 9c 63 c1 35 fc e2 bf ab 64 9b 94 43 6d 1c 69 d7 a1 02 80 d6 15 a2 a4 c3 ab 74 a8 40 5d Data Ascii: Ts6.;NZklGUQ;w"-!]JIc5dCmit@]R$UL6i,`Zu -3:f"i4EmI}Lgx7b4I%'.alR2',GwCR6OA^D}J"dksdj4h1/Y1QU9HI
Oct 24, 2024 00:44:15.345468998 CEST	1236	IN	Data Raw: 56 61 80 71 d1 29 5a 2e 4d c8 1d 11 b1 a0 01 2e 0e 17 43 9f 56 3c 55 8e ea aa 9b e6 41 27 18 f6 a3 71 8b 02 ec 8a 52 3b c2 50 a6 73 dd 55 47 55 28 1a dc bd ff 7c d3 55 37 58 81 0d c4 3c 92 5a 60 d7 62 74 54 ca 2e 31 ef e0 71 d0 b3 c2 fb 52 fe e7 Data Ascii: Vaq)Z.M.CV<UA'qR;PsUGU(\|U7X<Z`btT.1qRTIg#+\b\k: `1)Y2` ;T!Dl b#Tl0M^`Jt<hJ*WaR~+g.\V.\'aQivRb1?
Oct 24, 2024 00:44:15.345482111 CEST	1236	IN	Data Raw: e1 3d 54 95 43 36 a2 2c 7c 65 67 cb e9 e8 85 54 78 ce a1 1f ab 01 80 b4 5d 4e 2f a6 e4 1e b4 e6 36 4a eb 38 2f 92 1e 3b 49 81 6e dc 6c 0d 0a 35 66 37 0d 0a a1 49 ee 8a 98 a6 c0 28 9c b9 52 93 60 da a7 17 67 03 59 ed c1 4d 90 53 c5 69 32 37 f9 73 Data Ascii: =TC6,\|egTx]N/6J8/;Inl5f7I(R`gYMSi27sd5?2N836;h'k&v,z~H'Gl\~a4<yW[Bz1yyFSS:(qnay-eM])UFSL6,
Oct 24, 2024 00:44:15.345567942 CEST	350	IN	Data Raw: d1 17 be 14 1d ea 87 34 b2 2f 8a a9 65 f9 08 bf cc 90 a4 4b 6c 02 94 d8 73 62 1b 1d c2 8f ec 4e 1c f8 c8 d3 44 78 77 4f 4c 30 80 ea 59 b5 f0 4f f1 43 aa d4 f5 a3 19 31 2c 73 41 7b 0d 83 37 3b df ae dc 68 80 c0 35 49 21 b9 2d c4 4b 6b 4e 88 04 43 Data Ascii: 4/eKlsbNDxwOL0YOC1,sA{7;h5I!-KkNCQM\O0>yx}DTF<]/rB"M)NAjt+TwO{}-g!8Vd746c2$-7{Fqu_II{ryV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49744	52.18.59.124	80	4092	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 00:44:12.364708900 CEST	460	OUT	GET /track.php?domain=josecarlosrevoredo.com&toggle=browserjs&uid=MTcyOTcyMzQ1MS4xNTg6NWNhZGExMWVmMjVjNmRmNWE1ODY2NTY2MmRhODIyZDg4ZmM2NTEzN2JjZjM3MGI2MzU1YzAxNTc4MTg0YTc1OTo2NzE5N2MzYjI2OTA5 HTTP/1.1 Host: josecarlosrevoredo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 24, 2024 00:44:13.564093113 CEST	631	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 23 Oct 2024 22:44:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=5 Vary: Accept-Encoding X-Custom-Track: browserjs Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Oct 24, 2024 00:44:16.844372988 CEST	386	OUT	GET /favicon.ico HTTP/1.1 Host: josecarlosrevoredo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=d0ca61f97155fcbe:T=1729723455:RT=1729723455:S=ALNI_MbXwVlo1IwlPM5_zzullDbZJuFGCw
Oct 24, 2024 00:44:17.440118074 CEST	225	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 23 Oct 2024 22:44:17 GMT Content-Type: image/x-icon Content-Length: 0 Connection: close Last-Modified: Wed, 11 Sep 2024 11:38:26 GMT ETag: "66e18132-0" Accept-Ranges: bytes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49745	18.66.121.135	80	4092	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 00:44:12.576384068 CEST	333	OUT	GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1 Host: d38psrni17bvxu.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 24, 2024 00:44:13.410317898 CEST	1236	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 11375 Connection: keep-alive Server: nginx Date: Wed, 23 Oct 2024 11:04:55 GMT Last-Modified: Thu, 21 Mar 2024 11:48:11 GMT Accept-Ranges: bytes ETag: "65fc1e7b-2c6f" X-Cache: Hit from cloudfront Via: 1.1 7b314c2b827b3a655861e27775634208.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P2 X-Amz-Cf-Id: PG1hndxHoz6oJo72CLxgu0OP-JBTLXfqwoZKNCJIy4D_wRo9eF4Eow== Age: 41958 Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 dc 00 00 02 58 08 03 00 00 00 4f 6d d4 16 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 00 50 4c 54 45 00 00 00 ff ff ff 63 64 74 49 4b 5e 49 4b 5d 49 4b 5c 30 33 49 48 4b 5f 61 63 73 63 65 75 62 64 74 63 65 74 15 19 30 3d 40 53 48 4b 5d 49 4c 5d 48 4b 5c 4d 50 62 4e 51 62 4f 52 63 12 17 2e 14 19 30 22 26 3b 28 2c 40 2b 2f 42 30 34 49 2e 32 46 2f 33 47 2d 31 44 30 34 48 2e 32 45 30 34 47 31 35 48 32 36 49 35 39 4c 38 3c 50 36 3a 4d 39 3d 51 37 3b 4e 3a 3e 52 3a 3e 51 3b 3f 52 3c 40 53 49 4c 5c 62 65 75 61 64 74 62 65 74 63 66 74 62 65 73 13 18 2d 15 1a 30 1b 20 35 1c 21 36 1d 22 37 1e 23 38 1d 22 36 1f 24 39 20 25 3a 21 26 3b 22 27 3c 22 27 3b 24 29 3e 23 28 3c 25 2a 3f 24 29 3d 26 2b 40 25 2a 3e 27 2c 41 26 2b 3f 28 2d 42 29 2e 43 28 2d 41 29 2e 42 2a 2f 43 2b 30 44 2c 31 45 30 35 49 31 35 47 3c 40 52 3d 41 53 49 4d 5f 48 4c 5d 4b 4f 60 48 4c 5c 4d 51 62 61 65 75 11 17 [TRUNCATED] Data Ascii: PNGIHDRXOmtEXtSoftwareAdobe ImageReadyqe<PLTEcdtIK^IK]IK\03IHK_acsceubdtcet0=@SHK]IL]HK\MPbNQbORc.0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes-0 5!6"7#8"6$9 %:!&;"'<"';$)>#(<%?$)=&+@%>',A&+?(-B).C(-A).B/C+0D,1E05I15G<@R=ASIM_HL]KO`HL\MQbaeu.-/.0/.0/11234 5!6#8$9%: &;"':$)<&+>',?(-@).A/B+0C,1D/A-2E.3F/4G05H16I/4F05G38K6;N49K;@S;@R<ASGL^bfuaetbft.0!5"6#7$8%9 &:!';"(<!':#)=#)<$=&,@&,?+1E)/B06IGL]GL\HM]bfs-.01 4!5"6#7$8 '< ';*0B.4F06H06G-0!5 (< (;
Oct 24, 2024 00:44:13.410372972 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 15 de 74 00 00 00 b1 74 52 4e 53 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: ttRNS
Oct 24, 2024 00:44:13.410387039 CEST	1236	IN	Data Raw: 4a 68 6f 86 3b bc 13 11 b4 e7 ea e5 53 8d b8 6e 86 bb 74 de ff ea 9a 92 62 21 52 fc 8a 5a 52 7f 28 9a f6 6d 0d b1 6e 8a bb 6c de 37 ef 2d a9 af 20 0f c5 ee 2b 45 2d a9 cd 86 68 f7 c1 5d 32 ef 65 e1 be 77 2f f6 50 e4 ef f6 bd e0 ae 94 76 3f dc e5 Data Ascii: Jho;Sntb!RZR(mnl7- +E-h]2ew/Pv?^NQ+m=}y1Tm{O}q{y;aaioD}Abvwyc2qoG{[;37HD^pM{{e^&x'KP!hKP
Oct 24, 2024 00:44:13.410645008 CEST	636	IN	Data Raw: 88 bb 52 de cb c5 9d 6b a9 14 ac 6b c0 dd 00 ed 43 70 3f 78 f0 9b bf 52 c7 fb 66 6c 27 42 f7 a0 b8 bf ac 93 f6 a1 b8 2b e4 bd 54 dc e1 88 c2 06 ee 57 69 df a6 94 f6 11 b8 ab e3 bd 4c dc ef c4 22 0a dd 9d e0 ae 9c f6 91 b8 2b e3 7d 33 b6 13 a1 7b Data Ascii: RkkCp?xRfl'B+TWiL"+}3{ U^R{s-nnk~!-ov"to'^w5ov"tokpgEgen}w3rvG}_w49@LiP../k.!.K:?
Oct 24, 2024 00:44:13.410656929 CEST	1236	IN	Data Raw: db 45 e0 1e 93 f7 6f 3f 10 9c e2 f0 b8 47 e2 bd 06 ed 56 71 47 77 c2 76 19 b8 c7 e2 bd fe ab d7 99 71 8f c0 7b 2d da cd e2 ce fb 1d 24 ab 4f 4f 16 8b 7b 97 f7 4b 1a 68 8f 85 7b 60 de 6b d2 6e 17 77 0e bc 93 a4 6e 9f 2c 19 f7 d0 bc 47 a2 3d 1e ee Data Ascii: Eo?GVqGwvq{-$OO{Kh{`knwn,G=vs$d_4c~7v;aCH{\v;$=*qoGLpo{d#?+l19G=oipq=ipv~;$
Oct 24, 2024 00:44:13.410669088 CEST	1236	IN	Data Raw: 9a 9e 79 7f b0 e0 43 70 af cd 7b 7a da 07 f1 6e 0b 77 e8 20 f9 59 c7 3d 03 ed b5 79 ef 3f 20 53 1f f7 0e ef df 7f 4b 26 ed 3d de ff c4 32 ee 5c 4b 25 15 5d b0 8c 7b 26 da 6b bd c6 37 82 f6 91 b8 8f 3c f8 9e 8f f6 aa 91 91 13 d8 4e 84 ee 81 70 cf Data Ascii: yCp{znw Y=y? SK&=2\K%]{&k7<NpH}yi\K%5]gF]>&O`;2\|;l'BK: W-q:X{k5'#7aikg
Oct 24, 2024 00:44:13.410680056 CEST	424	IN	Data Raw: 69 cf 8a fb 32 ef 01 69 b7 80 3b ba 13 b6 eb c7 7d 99 f7 ac b4 67 c6 bd c3 fb 37 1e 9a 9d 05 f7 35 7d 84 11 a4 b3 6d e0 be ae 7f fd c6 d7 f2 ea 9a 15 f7 f1 b3 fb f7 7f ed fe 87 c0 9d 0f 77 e2 d3 dd 16 ee cf df 3f be 7f ff d9 f1 42 71 ef d2 de 2d Data Ascii: i2i;}g75}mw?Bq- qHs/{{c;Wi@{8uv;#p_O{F=sNq=Naxv"t{5xwbhb}w=q?DxW;&n,aGw^b"}4ywh
Oct 24, 2024 00:44:13.410691023 CEST	1236	IN	Data Raw: 6f 4f 7b 24 de af d0 be 06 f7 f0 bc 07 a1 bd db d7 b7 1a c5 9d 91 03 c4 be bb 4a dc c3 d0 1e 81 f7 55 da d7 e1 1e 96 f7 60 b4 37 e1 5d 17 ee 37 b2 f6 c9 7a 37 5a c4 3d 1c ed 81 79 5f 4b fb 06 dc 83 f1 3e 1e 94 f6 fa bc eb c2 9d 95 4f f6 fb 94 39 Data Ascii: oO{$JU`7]7z7Z=y_K>O9]Sm{x;H{gpC{iH{!BH%U}exZ{Q+TX/=>.61ihn
Oct 24, 2024 00:44:13.410703897 CEST	1236	IN	Data Raw: f9 f0 de 98 76 59 b8 a3 3b 91 2e db 9b e3 ee c5 7b 12 da 3b 25 c2 bd 39 ef 1e b4 0b c3 1d dd 89 54 d9 ee 83 7b 63 de 53 d1 9e 10 f7 66 8f 35 79 d1 2e 0d 77 74 27 d2 64 bb 1f ee 8d 78 4f 47 7b 52 dc eb f3 ee 49 bb 38 dc d1 9d 68 58 f7 2e 9a c0 bd Data Ascii: vY;.{;%9T{cSf5y.wt'dxOG{RI8hX.6)iO{=i;fE+=-q{eUAX4H>qgkHp{z>zsyA{&yoMPHq=p=RqGw\!v;
Oct 24, 2024 00:44:13.411178112 CEST	1236	IN	Data Raw: a2 3d 3c ee d3 d7 b3 7e 88 a4 76 fd 74 6c dc 3b a6 e8 e5 dd 19 a2 3d 02 ee 6c cd 10 95 b1 25 33 00 77 c5 bc 3b 43 b4 47 c1 9d 9d 19 22 91 bd 96 08 77 b5 bc 3b 43 b4 47 c1 1d dd 89 0a b1 7d 7a a0 2c 8f 6b e4 7d 00 ee 1f 6b a4 3d 0e ee e8 4e 54 86 Data Ascii: =<~vtl;=l%3w;CG"w;CG}z,k}k=NTClQFSSqgHZwgh;"-#}QC`pGw"]qGw"]1qGw"tNwIq.5'p7@{\x'2%w%;Cow"}JcOqG
Oct 24, 2024 00:44:13.415843964 CEST	869	IN	Data Raw: 78 af 35 32 d2 41 3b 11 51 5f fb 24 bb 57 67 22 b0 83 76 22 a2 8a a6 74 f3 ee 34 3c 8d 0a ed 44 04 ef cd 78 77 7a 69 ff 7b fe f4 88 08 de 1b e3 3e 23 f9 2a ee d4 96 2d fc d9 11 11 bc 37 c6 5d 38 ed dc 58 22 22 78 1f c6 bb 83 76 22 a2 e1 bc 8b 3e Data Ascii: x52A;Q_$Wg"v"t4<Dxwzi{>#*-7]8X""xv">9UDDy\|A;T"Z;E?."ASf.vn,x?HF`DDRO;#d9scwDD>Zt\FDnwn,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49751	52.18.59.124	80	4092	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 00:44:16.077939987 CEST	400	OUT	GET /favicon.ico HTTP/1.1 Host: josecarlosrevoredo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://josecarlosrevoredo.com/privacy.html Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 24, 2024 00:44:16.674503088 CEST	253	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 23 Oct 2024 22:44:16 GMT Content-Type: image/x-icon Content-Length: 0 Connection: keep-alive Keep-Alive: timeout=5 Last-Modified: Wed, 11 Sep 2024 11:38:26 GMT ETag: "66e18132-0" Accept-Ranges: bytes
Oct 24, 2024 00:44:18.406064987 CEST	620	OUT	GET /track.php?domain=josecarlosrevoredo.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyOTcyMzQ1MS4xNTg6NWNhZGExMWVmMjVjNmRmNWE1ODY2NTY2MmRhODIyZDg4ZmM2NTEzN2JjZjM3MGI2MzU1YzAxNTc4MTg0YTc1OTo2NzE5N2MzYjI2OTA5 HTTP/1.1 Host: josecarlosrevoredo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://josecarlosrevoredo.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=d0ca61f97155fcbe:T=1729723455:RT=1729723455:S=ALNI_MbXwVlo1IwlPM5_zzullDbZJuFGCw
Oct 24, 2024 00:44:19.009476900 CEST	605	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 23 Oct 2024 22:44:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Custom-Track: answercheck Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49762	52.18.59.124	80	4092	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 00:44:19.468612909 CEST	579	OUT	GET /track.php?domain=josecarlosrevoredo.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyOTcyMzQ1MS4xNTg6NWNhZGExMWVmMjVjNmRmNWE1ODY2NTY2MmRhODIyZDg4ZmM2NTEzN2JjZjM3MGI2MzU1YzAxNTc4MTg0YTc1OTo2NzE5N2MzYjI2OTA5 HTTP/1.1 Host: josecarlosrevoredo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=d0ca61f97155fcbe:T=1729723455:RT=1729723455:S=ALNI_MbXwVlo1IwlPM5_zzullDbZJuFGCw
Oct 24, 2024 00:44:20.671557903 CEST	633	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 23 Oct 2024 22:44:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=5 Vary: Accept-Encoding X-Custom-Track: answercheck Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49743	142.250.186.68	443	4092	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:44:13 UTC	430	OUT	GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://josecarlosrevoredo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:44:13 UTC	845	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 153659 Date: Wed, 23 Oct 2024 22:44:13 GMT Expires: Wed, 23 Oct 2024 22:44:13 GMT Cache-Control: private, max-age=3600 ETag: "10427694455856849617" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-23 22:44:13 UTC	533	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 68 61 73 68 3a 22 31 35 31 34 39 34 32 39 39 34 35 35 30 31 30 37 31 35 36 36 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 30 30 30 32 2c 31 37 33 30 31 34 33 37 2c 31 37 33 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"15149429945501071566",packages:"domains",module:"ads",version:"1",m:{cei:"17300002,17301437,173
2024-10-23 22:44:13 UTC	1378	IN	Data Raw: 76 65 72 50 72 6f 76 69 64 65 64 44 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 77 61 69 74 4f 6e 43 6f 6e 73 65 6e 74 46 6f 72 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 45 6e 68 61 6e 63 65 64 54 61 72 67 65 74 69 6e 67 52 73 6f 6e 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 6b 69 6e 67 53 61 73 43 6f 6f 6b 69 65 22 3a 74 72 75 65 7d 2c 6d 64 70 3a 31 38 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 4c 6d 39 79 5a 79 78 70 62 69 35 75 5a Data Ascii: verProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZ
2024-10-23 22:44:13 UTC	1378	IN	Data Raw: 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 67 7d 29 7d 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 71 65 7d 3b 76 61 72 20 64 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 71 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 Data Ascii: figurable:!0,writable:!0,value:g})}if(a)return a;c.prototype.toString=function(){return this.qe};var d="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",e=0;return b});q("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array
2024-10-23 22:44:13 UTC	1378	IN	Data Raw: 5f 70 72 6f 74 6f 5f 5f 3d 62 3b 69 66 28 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 21 3d 3d 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 70 61 3d 6c 61 3b 0a 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6b 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 70 61 29 70 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 Data Ascii: _proto__=b;if(a.__proto__!==b)throw new TypeError(a+" is not extensible");return a}:null}var pa=la;function qa(a,b){a.prototype=ka(b.prototype);a.prototype.constructor=a;if(pa)pa(a,b);else for(var c in b)if(c!="prototype")if(Object.defineProperties){var
2024-10-23 22:44:13 UTC	1378	IN	Data Raw: 65 6c 73 65 7b 61 3a 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 67 29 7b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 76 61 72 20 68 3d 67 21 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 0a 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 55 66 28 67 29 3a 74 68 69 73 2e 4e 64 28 67 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 55 66 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 62 64 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 67 67 28 68 2c 67 29 3a 74 68 69 73 2e 4e 64 28 67 29 7d 3b Data Ascii: else{a:switch(typeof g){case "object":var h=g!=null;break a;case "function":h=!0;break a;default:h=!1}h?this.Uf(g):this.Nd(g)}};b.prototype.Uf=function(g){var h=void 0;try{h=g.then}catch(k){this.bd(k);return}typeof h=="function"?this.gg(h,g):this.Nd(g)};
2024-10-23 22:44:13 UTC	1378	IN	Data Raw: 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 72 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 66 75 6e 63 74 69 6f 6e 28 76 29 7b 74 72 79 7b 6c 28 72 28 76 29 29 7d 63 61 74 63 68 28 77 29 7b 6d 28 77 29 7d 7d 3a 74 7d 76 61 72 20 6c 2c 6d 2c 70 3d 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 6c 3d 72 3b 6d 3d 74 7d 29 3b 74 68 69 73 2e 69 62 28 6b 28 67 2c 6c 29 2c 6b 28 68 2c 6d 29 29 3b 72 65 74 75 72 6e 20 70 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 62 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 0a 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c Data Ascii: t){return typeof r=="function"?function(v){try{l(r(v))}catch(w){m(w)}}:t}var l,m,p=new b(function(r,t){l=r;m=t});this.ib(k(g,l),k(h,m));return p};b.prototype.catch=function(g){return this.then(void 0,g)};b.prototype.ib=function(g,h){function k(){switch(l
2024-10-23 22:44:13 UTC	1378	IN	Data Raw: 31 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 64 28 6b 29 7b 76 61 72 20 6c 3d 74 79 70 65 6f 66 20 6b 3b 72 65 74 75 72 6e 20 6c 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 6b 21 3d 3d 6e 75 6c 6c 7c 7c 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 69 66 28 21 73 61 28 6b 2c 67 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b 63 61 28 6b 2c 67 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6d 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 Data Ascii: 1])}}function c(){}function d(k){var l=typeof k;return l==="object"&&k!==null\|\|l==="function"}function e(k){if(!sa(k,g)){var l=new c;ca(k,g,{value:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(m){if(m instanceof c)return m;Object.isExtensible(
2024-10-23 22:44:13 UTC	1378	IN	Data Raw: 26 26 73 61 28 68 5b 30 5d 2c 6c 29 29 66 6f 72 28 68 3d 30 3b 68 3c 6d 2e 6c 65 6e 67 74 68 3b 68 2b 2b 29 7b 76 61 72 20 70 3d 6d 5b 68 5d 3b 69 66 28 6b 21 3d 3d 6b 26 26 70 2e 6b 65 79 21 3d 3d 70 2e 6b 65 79 7c 7c 6b 3d 3d 3d 70 2e 6b 65 79 29 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 68 2c 49 3a 70 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 0a 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 2d 31 2c 49 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 68 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 68 29 7b 68 3d 75 28 68 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 68 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 Data Ascii: &&sa(h[0],l))for(h=0;h<m.length;h++){var p=m[h];if(k!==k&&p.key!==p.key\|\|k===p.key)return{id:l,list:m,index:h,I:p}}return{id:l,list:m,index:-1,I:void 0}}function e(h){this[0]={};this[1]=b();this.size=0;if(h){h=u(h);for(var k;!(k=h.next()).done;)k=k.value
2024-10-23 22:44:13 UTC	1378	IN	Data Raw: 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 5b 68 2e 6b 65 79 2c 68 2e 76 61 6c 75 65 5d 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 6b 65 79 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 Data Ascii: (){return c(this,function(h){return[h.key,h.value]})};e.prototype.keys=function(){return c(this,function(h){return h.key})};e.prototype.values=function(){return c(this,function(h){return h.value})};e.prototype.forEach=function(h,k){for(var l=this.entries(
2024-10-23 22:44:13 UTC	1378	IN	Data Raw: 72 20 64 3d 78 61 28 74 68 69 73 2c 62 2c 22 65 6e 64 73 57 69 74 68 22 29 3b 62 2b 3d 22 22 3b 63 3d 3d 3d 76 6f 69 64 20 30 26 26 28 63 3d 64 2e 6c 65 6e 67 74 68 29 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 6f 72 28 76 61 72 20 65 3d 62 2e 6c 65 6e 67 74 68 3b 65 3e 30 26 26 63 3e 30 3b 29 69 66 28 64 5b 2d 2d 63 5d 21 3d 62 5b 2d 2d 65 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 65 3c 3d 30 7d 7d 29 3b 0a 71 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 Data Ascii: r d=xa(this,b,"endsWith");b+="";c===void 0&&(c=d.length);c=Math.max(0,Math.min(c\|0,d.length));for(var e=b.length;e>0&&c>0;)if(d[--c]!=b[--e])return!1;return e<=0}});q("Array.prototype.find",function(a){return a?a:function(b,c){a:{var d=this;d instanceof

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49747	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:44:14 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-23 22:44:14 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=64918 Date: Wed, 23 Oct 2024 22:44:14 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49748	172.217.16.196	443	4092	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:44:15 UTC	476	OUT	GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:44:15 UTC	844	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 153659 Date: Wed, 23 Oct 2024 22:44:15 GMT Expires: Wed, 23 Oct 2024 22:44:15 GMT Cache-Control: private, max-age=3600 ETag: "9598733241945546462" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-23 22:44:15 UTC	534	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 68 61 73 68 3a 22 31 35 31 34 39 34 32 39 39 34 35 35 30 31 30 37 31 35 36 36 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 30 30 30 33 2c 31 37 33 30 31 34 33 37 2c 31 37 33 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"15149429945501071566",packages:"domains",module:"ads",version:"1",m:{cei:"17300003,17301437,173
2024-10-23 22:44:15 UTC	1378	IN	Data Raw: 65 72 50 72 6f 76 69 64 65 64 44 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 77 61 69 74 4f 6e 43 6f 6e 73 65 6e 74 46 6f 72 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 45 6e 68 61 6e 63 65 64 54 61 72 67 65 74 69 6e 67 52 73 6f 6e 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 6b 69 6e 67 53 61 73 43 6f 6f 6b 69 65 22 3a 74 72 75 65 7d 2c 6d 64 70 3a 31 38 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 4c 6d 39 79 5a 79 78 70 62 69 35 75 5a 58 Data Ascii: erProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZX
2024-10-23 22:44:15 UTC	1378	IN	Data Raw: 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 67 7d 29 7d 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 71 65 7d 3b 76 61 72 20 64 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 71 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 Data Ascii: igurable:!0,writable:!0,value:g})}if(a)return a;c.prototype.toString=function(){return this.qe};var d="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",e=0;return b});q("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array I
2024-10-23 22:44:15 UTC	1378	IN	Data Raw: 70 72 6f 74 6f 5f 5f 3d 62 3b 69 66 28 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 21 3d 3d 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 70 61 3d 6c 61 3b 0a 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6b 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 70 61 29 70 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 Data Ascii: proto__=b;if(a.__proto__!==b)throw new TypeError(a+" is not extensible");return a}:null}var pa=la;function qa(a,b){a.prototype=ka(b.prototype);a.prototype.constructor=a;if(pa)pa(a,b);else for(var c in b)if(c!="prototype")if(Object.defineProperties){var d
2024-10-23 22:44:15 UTC	1378	IN	Data Raw: 6c 73 65 7b 61 3a 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 67 29 7b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 76 61 72 20 68 3d 67 21 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 0a 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 55 66 28 67 29 3a 74 68 69 73 2e 4e 64 28 67 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 55 66 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 62 64 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 67 67 28 68 2c 67 29 3a 74 68 69 73 2e 4e 64 28 67 29 7d 3b 62 Data Ascii: lse{a:switch(typeof g){case "object":var h=g!=null;break a;case "function":h=!0;break a;default:h=!1}h?this.Uf(g):this.Nd(g)}};b.prototype.Uf=function(g){var h=void 0;try{h=g.then}catch(k){this.bd(k);return}typeof h=="function"?this.gg(h,g):this.Nd(g)};b
2024-10-23 22:44:15 UTC	1378	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 72 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 66 75 6e 63 74 69 6f 6e 28 76 29 7b 74 72 79 7b 6c 28 72 28 76 29 29 7d 63 61 74 63 68 28 77 29 7b 6d 28 77 29 7d 7d 3a 74 7d 76 61 72 20 6c 2c 6d 2c 70 3d 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 6c 3d 72 3b 6d 3d 74 7d 29 3b 74 68 69 73 2e 69 62 28 6b 28 67 2c 6c 29 2c 6b 28 68 2c 6d 29 29 3b 72 65 74 75 72 6e 20 70 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 62 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 0a 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e Data Ascii: ){return typeof r=="function"?function(v){try{l(r(v))}catch(w){m(w)}}:t}var l,m,p=new b(function(r,t){l=r;m=t});this.ib(k(g,l),k(h,m));return p};b.prototype.catch=function(g){return this.then(void 0,g)};b.prototype.ib=function(g,h){function k(){switch(l.
2024-10-23 22:44:15 UTC	1378	IN	Data Raw: 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 64 28 6b 29 7b 76 61 72 20 6c 3d 74 79 70 65 6f 66 20 6b 3b 72 65 74 75 72 6e 20 6c 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 6b 21 3d 3d 6e 75 6c 6c 7c 7c 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 69 66 28 21 73 61 28 6b 2c 67 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b 63 61 28 6b 2c 67 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6d 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6d Data Ascii: ])}}function c(){}function d(k){var l=typeof k;return l==="object"&&k!==null\|\|l==="function"}function e(k){if(!sa(k,g)){var l=new c;ca(k,g,{value:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(m){if(m instanceof c)return m;Object.isExtensible(m
2024-10-23 22:44:15 UTC	1378	IN	Data Raw: 26 73 61 28 68 5b 30 5d 2c 6c 29 29 66 6f 72 28 68 3d 30 3b 68 3c 6d 2e 6c 65 6e 67 74 68 3b 68 2b 2b 29 7b 76 61 72 20 70 3d 6d 5b 68 5d 3b 69 66 28 6b 21 3d 3d 6b 26 26 70 2e 6b 65 79 21 3d 3d 70 2e 6b 65 79 7c 7c 6b 3d 3d 3d 70 2e 6b 65 79 29 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 68 2c 49 3a 70 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 0a 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 2d 31 2c 49 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 68 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 68 29 7b 68 3d 75 28 68 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 68 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c Data Ascii: &sa(h[0],l))for(h=0;h<m.length;h++){var p=m[h];if(k!==k&&p.key!==p.key\|\|k===p.key)return{id:l,list:m,index:h,I:p}}return{id:l,list:m,index:-1,I:void 0}}function e(h){this[0]={};this[1]=b();this.size=0;if(h){h=u(h);for(var k;!(k=h.next()).done;)k=k.value,
2024-10-23 22:44:15 UTC	1378	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 5b 68 2e 6b 65 79 2c 68 2e 76 61 6c 75 65 5d 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 6b 65 79 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 Data Ascii: ){return c(this,function(h){return[h.key,h.value]})};e.prototype.keys=function(){return c(this,function(h){return h.key})};e.prototype.values=function(){return c(this,function(h){return h.value})};e.prototype.forEach=function(h,k){for(var l=this.entries()
2024-10-23 22:44:15 UTC	1378	IN	Data Raw: 20 64 3d 78 61 28 74 68 69 73 2c 62 2c 22 65 6e 64 73 57 69 74 68 22 29 3b 62 2b 3d 22 22 3b 63 3d 3d 3d 76 6f 69 64 20 30 26 26 28 63 3d 64 2e 6c 65 6e 67 74 68 29 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 6f 72 28 76 61 72 20 65 3d 62 2e 6c 65 6e 67 74 68 3b 65 3e 30 26 26 63 3e 30 3b 29 69 66 28 64 5b 2d 2d 63 5d 21 3d 62 5b 2d 2d 65 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 65 3c 3d 30 7d 7d 29 3b 0a 71 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 Data Ascii: d=xa(this,b,"endsWith");b+="";c===void 0&&(c=d.length);c=Math.max(0,Math.min(c\|0,d.length));for(var e=b.length;e>0&&c>0;)if(d[--c]!=b[--e])return!1;return e<=0}});q("Array.prototype.find",function(a){return a?a:function(b,c){a:{var d=this;d instanceof S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49750	172.217.18.110	443	4092	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:44:15 UTC	1717	OUT	GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=bucket007%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet09_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fjosecarlosrevoredo.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3MTk3YzNiMjY4YTd8fHwxNzI5NzIzNDUxLjE4OTR8ZTM5ZmQ1Yzk3ZDdiZTc3NmQzY2U5ODRkMGRmOTBlNWU3ZDk3YTVmMHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDdlNzNmNWYzNDEzZGI1NTkwMGQ0ZWM1Y2NiZWYxODkzZTYyNmFkZjR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fA%253D%253D&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2192083245873568&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301542%2C17301266%2C72717107&format=r3%7Cs&nocache=9961729723453569&num=0&output=afd_ads&domain_name=josecarlosrevoredo.com&v=3&bsl=8&pac=2&u_his=1&u_tz=-240&dt=1729723453572&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=789&frm=0&uio=--&cont=tc&drt=0&jsid=caf&nfp=1&jsv=688160506&rurl=http%3A%2F%2Fjosecarlosrevore [TRUNCATED] Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://josecarlosrevoredo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:44:15 UTC	807	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Content-Disposition: inline Date: Wed, 23 Oct 2024 22:44:15 GMT Expires: Wed, 23 Oct 2024 22:44:15 GMT Cache-Control: private, max-age=3600 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-V-sJXr1qlO2wGNB9owla5A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Server: gws X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-23 22:44:15 UTC	571	IN	Data Raw: 33 61 33 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 20 3c 68 65 61 64 3e 20 3c 73 74 79 6c 65 20 69 64 3d 22 73 73 72 2d 62 6f 69 6c 65 72 70 6c 61 74 65 22 3e 62 6f 64 79 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 20 6d 61 72 67 69 6e 3a 30 3b 7d 2e 64 69 76 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 7d 2e 73 70 61 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 20 2e 64 69 76 3a 6c 61 73 Data Ascii: 3a3c<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:las
2024-10-23 22:44:15 UTC	1378	IN	Data Raw: 69 67 68 74 3a 31 30 30 25 3b 7d 2e 69 5f 7b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 76 5f 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a Data Ascii: ight:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:
2024-10-23 22:44:15 UTC	1378	IN	Data Raw: 65 3a 31 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 3b 7d 2e 6d 5f 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 6f 5f 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 7d 2e 78 5f 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 7d 2e 79 5f 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 7a 2d 69 6e 64 65 78 3a 31 3b 7d 2e 6b 5f 3e 64 69 76 3a 6e 6f 74 28 2e 79 5f 29 20 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e Data Ascii: e:1; max-width: 100%;}.m_{overflow:hidden;}.o_{white-space:nowrap;}.x_{cursor:pointer;}.y_{display:none; position:absolute; z-index:1;}.k_>div:not(.y_) {display:-webkit-inline-box; display:-moz-inline-box; display:-ms-inline-flexbox; display:-webkit-inlin
2024-10-23 22:44:15 UTC	1378	IN	Data Raw: 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 42 6f 74 74 6f 6d 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 43 65 6e 74 65 72 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 61 6c Data Ascii: ign:start; -webkit-align-items:flex-start; align-items:flex-start;}.flexAlignBottom{-ms-flex-align:end; -webkit-box-align:end; -webkit-align-items:flex-end; align-items:flex-end;}.flexAlignCenter{-ms-flex-align:center; -webkit-box-align:center; -webkit-al
2024-10-23 22:44:15 UTC	1378	IN	Data Raw: 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 7d 2e 73 69 31 30 32 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 35 70 78 3b 68 65 69 67 68 74 3a 33 30 70 78 3b 77 69 64 74 68 3a 31 70 78 3b 7d 2e 73 69 31 32 38 7b 68 65 69 67 68 74 3a 31 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 7d 64 69 76 3e 64 69 76 2e 73 69 31 32 38 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 7d 2e 73 69 31 33 33 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f Data Ascii: webkit-flex-shrink:1; flex-shrink:1;}.si102{border-radius:15px;height:30px;width:1px;}.si128{height:1px;width:100%; -ms-flex-negative:1;-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}div>div.si128:last-child{display:none;}.si133{background-co
2024-10-23 22:44:15 UTC	1378	IN	Data Raw: 73 74 61 72 74 3b 2d 6d 73 2d 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 20 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 22 20 64 61 74 61 2d 61 64 2d 63 6f 6e 74 61 69 6e 65 72 3d 22 31 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 72 73 73 41 74 74 72 43 6f 6e 74 61 69 6e 65 72 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 70 5f 20 73 69 Data Ascii: start;-ms-flex-wrap:wrap; -webkit-flex-wrap:wrap; flex-wrap:wrap;" data-ad-container="1"><div class="i_ div rssAttrContainer" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;"><span class="p_ si
2024-10-23 22:44:15 UTC	1378	IN	Data Raw: 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 36 39 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 63 65 6e Data Ascii: er; -webkit-box-align:center; -webkit-align-items:center; align-items:center;"><div class="i_ div si69" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;-ms-flex-pack:center; -webkit-box-pack:cen
2024-10-23 22:44:15 UTC	1378	IN	Data Raw: 61 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 69 64 3d 22 65 33 22 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 63 6c 69 63 6b 74 72 61 63 6b 65 64 41 64 5f 6a 73 20 73 69 31 30 31 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 6a 6f 73 65 63 61 72 6c 6f 73 72 65 76 6f 72 65 64 6f 2e 63 6f 6d 2f 3f 74 73 3d 66 45 4e 73 5a 57 46 75 55 47 56 77 63 47 56 79 62 57 6c 75 64 45 4a 73 59 57 4e 72 66 48 77 31 59 32 55 34 4e 48 78 69 64 Data Ascii: a></div><div id="e3" class="i_ div clicktrackedAd_js si101" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;"><a href="http://josecarlosrevoredo.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxid
2024-10-23 22:44:15 UTC	1378	IN	Data Raw: 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 22 3e 3c 64 69 76 20 61 72 69 61 2d 68 Data Ascii: content:center;-ms-flex-align:center; -webkit-box-align:center; -webkit-align-items:center; align-items:center;"><div class="i_ div" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;"><div aria-h
2024-10-23 22:44:15 UTC	1378	IN	Data Raw: 34 59 54 64 38 66 48 77 78 4e 7a 49 35 4e 7a 49 7a 4e 44 55 78 4c 6a 45 34 4f 54 52 38 5a 54 4d 35 5a 6d 51 31 59 7a 6b 33 5a 44 64 69 5a 54 63 33 4e 6d 51 7a 59 32 55 35 4f 44 52 6b 4d 47 52 6d 4f 54 42 6c 4e 57 55 33 5a 44 6b 33 59 54 56 6d 4d 48 78 38 66 48 78 38 4d 58 78 38 4d 48 77 77 66 48 78 38 66 44 46 38 66 48 78 38 66 44 42 38 4d 48 78 38 66 48 78 38 66 48 78 38 66 48 77 77 66 44 42 38 66 44 42 38 66 48 77 77 66 44 42 38 56 7a 45 77 50 58 78 38 4d 58 78 58 4d 54 41 39 66 44 64 6c 4e 7a 4e 6d 4e 57 59 7a 4e 44 45 7a 5a 47 49 31 4e 54 6b 77 4d 47 51 30 5a 57 4d 31 59 32 4e 69 5a 57 59 78 4f 44 6b 7a 5a 54 59 79 4e 6d 46 6b 5a 6a 52 38 4d 48 78 6b 63 43 31 30 5a 57 46 74 61 57 35 30 5a 58 4a 75 5a 58 51 77 4f 56 38 7a 63 47 68 38 4d 48 77 77 66 48 Data Ascii: 4YTd8fHwxNzI5NzIzNDUxLjE4OTR8ZTM5ZmQ1Yzk3ZDdiZTc3NmQzY2U5ODRkMGRmOTBlNWU3ZDk3YTVmMHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDdlNzNmNWYzNDEzZGI1NTkwMGQ0ZWM1Y2NiZWYxODkzZTYyNmFkZjR8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49752	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:44:15 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-23 22:44:16 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=64886 Date: Wed, 23 Oct 2024 22:44:15 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-23 22:44:16 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49754	172.217.18.110	443	4092	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:44:16 UTC	555	OUT	GET /adsense/domains/caf.js?pac=2 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://syndicatedsearch.goog/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:44:17 UTC	844	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 153657 Date: Wed, 23 Oct 2024 22:44:16 GMT Expires: Wed, 23 Oct 2024 22:44:16 GMT Cache-Control: private, max-age=3600 ETag: "6314474397851350051" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-23 22:44:17 UTC	534	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 73 79 6e 64 69 63 61 74 65 64 73 65 61 72 63 68 2e 67 6f 6f 67 22 2c 68 61 73 68 3a 22 31 35 31 34 39 34 32 39 39 34 35 35 30 31 30 37 31 35 36 36 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 31 34 33 37 2c 31 37 33 30 31 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"15149429945501071566",packages:"domains",module:"ads",version:"1",m:{cei:"17301437,17301
2024-10-23 22:44:17 UTC	1378	IN	Data Raw: 50 72 6f 76 69 64 65 64 44 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 77 61 69 74 4f 6e 43 6f 6e 73 65 6e 74 46 6f 72 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 45 6e 68 61 6e 63 65 64 54 61 72 67 65 74 69 6e 67 52 73 6f 6e 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 6b 69 6e 67 53 61 73 43 6f 6f 6b 69 65 22 3a 74 72 75 65 7d 2c 6d 64 70 3a 31 38 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 4c 6d 39 79 5a 79 78 70 62 69 35 75 5a 58 51 73 Data Ascii: ProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQs
2024-10-23 22:44:17 UTC	1378	IN	Data Raw: 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 67 7d 29 7d 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 71 65 7d 3b 76 61 72 20 64 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 71 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 Data Ascii: urable:!0,writable:!0,value:g})}if(a)return a;c.prototype.toString=function(){return this.qe};var d="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",e=0;return b});q("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int
2024-10-23 22:44:17 UTC	1378	IN	Data Raw: 6f 74 6f 5f 5f 3d 62 3b 69 66 28 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 21 3d 3d 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 70 61 3d 6c 61 3b 0a 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6b 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 70 61 29 70 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f Data Ascii: oto__=b;if(a.__proto__!==b)throw new TypeError(a+" is not extensible");return a}:null}var pa=la;function qa(a,b){a.prototype=ka(b.prototype);a.prototype.constructor=a;if(pa)pa(a,b);else for(var c in b)if(c!="prototype")if(Object.defineProperties){var d=O
2024-10-23 22:44:17 UTC	1378	IN	Data Raw: 65 7b 61 3a 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 67 29 7b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 76 61 72 20 68 3d 67 21 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 0a 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 55 66 28 67 29 3a 74 68 69 73 2e 4e 64 28 67 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 55 66 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 62 64 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 67 67 28 68 2c 67 29 3a 74 68 69 73 2e 4e 64 28 67 29 7d 3b 62 2e 70 Data Ascii: e{a:switch(typeof g){case "object":var h=g!=null;break a;case "function":h=!0;break a;default:h=!1}h?this.Uf(g):this.Nd(g)}};b.prototype.Uf=function(g){var h=void 0;try{h=g.then}catch(k){this.bd(k);return}typeof h=="function"?this.gg(h,g):this.Nd(g)};b.p
2024-10-23 22:44:17 UTC	1378	IN	Data Raw: 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 72 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 66 75 6e 63 74 69 6f 6e 28 76 29 7b 74 72 79 7b 6c 28 72 28 76 29 29 7d 63 61 74 63 68 28 77 29 7b 6d 28 77 29 7d 7d 3a 74 7d 76 61 72 20 6c 2c 6d 2c 70 3d 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 6c 3d 72 3b 6d 3d 74 7d 29 3b 74 68 69 73 2e 69 62 28 6b 28 67 2c 6c 29 2c 6b 28 68 2c 6d 29 29 3b 72 65 74 75 72 6e 20 70 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 62 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 0a 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 42 29 Data Ascii: return typeof r=="function"?function(v){try{l(r(v))}catch(w){m(w)}}:t}var l,m,p=new b(function(r,t){l=r;m=t});this.ib(k(g,l),k(h,m));return p};b.prototype.catch=function(g){return this.then(void 0,g)};b.prototype.ib=function(g,h){function k(){switch(l.B)
2024-10-23 22:44:17 UTC	1378	IN	Data Raw: 7d 7d 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 64 28 6b 29 7b 76 61 72 20 6c 3d 74 79 70 65 6f 66 20 6b 3b 72 65 74 75 72 6e 20 6c 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 6b 21 3d 3d 6e 75 6c 6c 7c 7c 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 69 66 28 21 73 61 28 6b 2c 67 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b 63 61 28 6b 2c 67 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6d 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6d 29 26 Data Ascii: }}function c(){}function d(k){var l=typeof k;return l==="object"&&k!==null\|\|l==="function"}function e(k){if(!sa(k,g)){var l=new c;ca(k,g,{value:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(m){if(m instanceof c)return m;Object.isExtensible(m)&
2024-10-23 22:44:17 UTC	1378	IN	Data Raw: 61 28 68 5b 30 5d 2c 6c 29 29 66 6f 72 28 68 3d 30 3b 68 3c 6d 2e 6c 65 6e 67 74 68 3b 68 2b 2b 29 7b 76 61 72 20 70 3d 6d 5b 68 5d 3b 69 66 28 6b 21 3d 3d 6b 26 26 70 2e 6b 65 79 21 3d 3d 70 2e 6b 65 79 7c 7c 6b 3d 3d 3d 70 2e 6b 65 79 29 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 68 2c 49 3a 70 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 0a 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 2d 31 2c 49 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 68 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 68 29 7b 68 3d 75 28 68 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 68 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 Data Ascii: a(h[0],l))for(h=0;h<m.length;h++){var p=m[h];if(k!==k&&p.key!==p.key\|\|k===p.key)return{id:l,list:m,index:h,I:p}}return{id:l,list:m,index:-1,I:void 0}}function e(h){this[0]={};this[1]=b();this.size=0;if(h){h=u(h);for(var k;!(k=h.next()).done;)k=k.value,th
2024-10-23 22:44:17 UTC	1378	IN	Data Raw: 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 5b 68 2e 6b 65 79 2c 68 2e 76 61 6c 75 65 5d 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 6b 65 79 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d Data Ascii: return c(this,function(h){return[h.key,h.value]})};e.prototype.keys=function(){return c(this,function(h){return h.key})};e.prototype.values=function(){return c(this,function(h){return h.value})};e.prototype.forEach=function(h,k){for(var l=this.entries(),m
2024-10-23 22:44:17 UTC	1378	IN	Data Raw: 3d 78 61 28 74 68 69 73 2c 62 2c 22 65 6e 64 73 57 69 74 68 22 29 3b 62 2b 3d 22 22 3b 63 3d 3d 3d 76 6f 69 64 20 30 26 26 28 63 3d 64 2e 6c 65 6e 67 74 68 29 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 6f 72 28 76 61 72 20 65 3d 62 2e 6c 65 6e 67 74 68 3b 65 3e 30 26 26 63 3e 30 3b 29 69 66 28 64 5b 2d 2d 63 5d 21 3d 62 5b 2d 2d 65 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 65 3c 3d 30 7d 7d 29 3b 0a 71 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 Data Ascii: =xa(this,b,"endsWith");b+="";c===void 0&&(c=d.length);c=Math.max(0,Math.min(c\|0,d.length));for(var e=b.length;e>0&&c>0;)if(d[--c]!=b[--e])return!1;return e<=0}});q("Array.prototype.find",function(a){return a?a:function(b,c){a:{var d=this;d instanceof Str

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49759	142.250.186.110	443	4092	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:44:19 UTC	373	OUT	GET /adsense/domains/caf.js?pac=2 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:44:19 UTC	844	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 153666 Date: Wed, 23 Oct 2024 22:44:19 GMT Expires: Wed, 23 Oct 2024 22:44:19 GMT Cache-Control: private, max-age=3600 ETag: "8300707444374568738" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-23 22:44:19 UTC	534	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 73 79 6e 64 69 63 61 74 65 64 73 65 61 72 63 68 2e 67 6f 6f 67 22 2c 68 61 73 68 3a 22 31 35 31 34 39 34 32 39 39 34 35 35 30 31 30 37 31 35 36 36 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 30 30 30 32 2c 31 37 33 30 31 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"15149429945501071566",packages:"domains",module:"ads",version:"1",m:{cei:"17300002,17301
2024-10-23 22:44:19 UTC	1378	IN	Data Raw: 75 73 65 53 65 72 76 65 72 50 72 6f 76 69 64 65 64 44 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 77 61 69 74 4f 6e 43 6f 6e 73 65 6e 74 46 6f 72 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 45 6e 68 61 6e 63 65 64 54 61 72 67 65 74 69 6e 67 52 73 6f 6e 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 6b 69 6e 67 53 61 73 43 6f 6f 6b 69 65 22 3a 74 72 75 65 7d 2c 6d 64 70 3a 31 38 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 4c 6d 39 79 5a 79 78 Data Ascii: useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyx
2024-10-23 22:44:19 UTC	1378	IN	Data Raw: 22 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 67 7d 29 7d 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 71 65 7d 3b 76 61 72 20 64 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 71 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 Data Ascii: ",{configurable:!0,writable:!0,value:g})}if(a)return a;c.prototype.toString=function(){return this.qe};var d="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",e=0;return b});q("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="
2024-10-23 22:44:19 UTC	1378	IN	Data Raw: 62 29 7b 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 3b 69 66 28 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 21 3d 3d 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 70 61 3d 6c 61 3b 0a 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6b 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 70 61 29 70 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 Data Ascii: b){a.__proto__=b;if(a.__proto__!==b)throw new TypeError(a+" is not extensible");return a}:null}var pa=la;function qa(a,b){a.prototype=ka(b.prototype);a.prototype.constructor=a;if(pa)pa(a,b);else for(var c in b)if(c!="prototype")if(Object.defineProperties
2024-10-23 22:44:19 UTC	1378	IN	Data Raw: 66 67 28 67 29 3b 65 6c 73 65 7b 61 3a 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 67 29 7b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 76 61 72 20 68 3d 67 21 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 0a 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 55 66 28 67 29 3a 74 68 69 73 2e 4e 64 28 67 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 55 66 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 62 64 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 67 67 28 68 2c 67 29 3a 74 68 69 73 2e 4e Data Ascii: fg(g);else{a:switch(typeof g){case "object":var h=g!=null;break a;case "function":h=!0;break a;default:h=!1}h?this.Uf(g):this.Nd(g)}};b.prototype.Uf=function(g){var h=void 0;try{h=g.then}catch(k){this.bd(k);return}typeof h=="function"?this.gg(h,g):this.N
2024-10-23 22:44:19 UTC	1378	IN	Data Raw: 6e 20 6b 28 72 2c 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 72 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 66 75 6e 63 74 69 6f 6e 28 76 29 7b 74 72 79 7b 6c 28 72 28 76 29 29 7d 63 61 74 63 68 28 77 29 7b 6d 28 77 29 7d 7d 3a 74 7d 76 61 72 20 6c 2c 6d 2c 70 3d 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 6c 3d 72 3b 6d 3d 74 7d 29 3b 74 68 69 73 2e 69 62 28 6b 28 67 2c 6c 29 2c 6b 28 68 2c 6d 29 29 3b 72 65 74 75 72 6e 20 70 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 62 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 0a 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 Data Ascii: n k(r,t){return typeof r=="function"?function(v){try{l(r(v))}catch(w){m(w)}}:t}var l,m,p=new b(function(r,t){l=r;m=t});this.ib(k(g,l),k(h,m));return p};b.prototype.catch=function(g){return this.then(void 0,g)};b.prototype.ib=function(g,h){function k(){sw
2024-10-23 22:44:19 UTC	1378	IN	Data Raw: 5b 30 5d 2c 6c 5b 31 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 64 28 6b 29 7b 76 61 72 20 6c 3d 74 79 70 65 6f 66 20 6b 3b 72 65 74 75 72 6e 20 6c 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 6b 21 3d 3d 6e 75 6c 6c 7c 7c 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 69 66 28 21 73 61 28 6b 2c 67 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b 63 61 28 6b 2c 67 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6d 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e Data Ascii: [0],l[1])}}function c(){}function d(k){var l=typeof k;return l==="object"&&k!==null\|\|l==="function"}function e(k){if(!sa(k,g)){var l=new c;ca(k,g,{value:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(m){if(m instanceof c)return m;Object.isExten
2024-10-23 22:44:19 UTC	1378	IN	Data Raw: 5d 3b 69 66 28 6d 26 26 73 61 28 68 5b 30 5d 2c 6c 29 29 66 6f 72 28 68 3d 30 3b 68 3c 6d 2e 6c 65 6e 67 74 68 3b 68 2b 2b 29 7b 76 61 72 20 70 3d 6d 5b 68 5d 3b 69 66 28 6b 21 3d 3d 6b 26 26 70 2e 6b 65 79 21 3d 3d 70 2e 6b 65 79 7c 7c 6b 3d 3d 3d 70 2e 6b 65 79 29 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 68 2c 49 3a 70 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 0a 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 2d 31 2c 49 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 68 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 68 29 7b 68 3d 75 28 68 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 68 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b Data Ascii: ];if(m&&sa(h[0],l))for(h=0;h<m.length;h++){var p=m[h];if(k!==k&&p.key!==p.key\|\|k===p.key)return{id:l,list:m,index:h,I:p}}return{id:l,list:m,index:-1,I:void 0}}function e(h){this[0]={};this[1]=b();this.size=0;if(h){h=u(h);for(var k;!(k=h.next()).done;)k=k
2024-10-23 22:44:19 UTC	1378	IN	Data Raw: 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 5b 68 2e 6b 65 79 2c 68 2e 76 61 6c 75 65 5d 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 6b 65 79 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e Data Ascii: nction(){return c(this,function(h){return[h.key,h.value]})};e.prototype.keys=function(){return c(this,function(h){return h.key})};e.prototype.values=function(){return c(this,function(h){return h.value})};e.prototype.forEach=function(h,k){for(var l=this.en
2024-10-23 22:44:19 UTC	1378	IN	Data Raw: 2c 63 29 7b 76 61 72 20 64 3d 78 61 28 74 68 69 73 2c 62 2c 22 65 6e 64 73 57 69 74 68 22 29 3b 62 2b 3d 22 22 3b 63 3d 3d 3d 76 6f 69 64 20 30 26 26 28 63 3d 64 2e 6c 65 6e 67 74 68 29 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 6f 72 28 76 61 72 20 65 3d 62 2e 6c 65 6e 67 74 68 3b 65 3e 30 26 26 63 3e 30 3b 29 69 66 28 64 5b 2d 2d 63 5d 21 3d 62 5b 2d 2d 65 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 65 3c 3d 30 7d 7d 29 3b 0a 71 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 Data Ascii: ,c){var d=xa(this,b,"endsWith");b+="";c===void 0&&(c=d.length);c=Math.max(0,Math.min(c\|0,d.length));for(var e=b.length;e>0&&c>0;)if(d[--c]!=b[--e])return!1;return e<=0}});q("Array.prototype.find",function(a){return a?a:function(b,c){a:{var d=this;d insta

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49761	142.250.181.225	443	4092	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:44:21 UTC	748	OUT	GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://syndicatedsearch.goog/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:44:21 UTC	798	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 391 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 23 Oct 2024 22:28:17 GMT Expires: Thu, 24 Oct 2024 21:28:17 GMT Cache-Control: public, max-age=82800 Age: 964 Last-Modified: Thu, 20 Jul 2023 22:48:00 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-23 22:44:21 UTC	391	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 66 66 66 66 66 66 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 30 30 22 20 68 65 69 67 68 74 3d 22 32 30 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 35 2e 35 20 31 34 68 2d 2e 37 39 6c 2d 2e 32 38 2d 2e 32 37 43 31 35 2e 34 31 20 31 32 2e 35 39 20 31 36 20 31 31 2e 31 31 20 31 36 20 39 2e 35 20 31 36 20 35 2e 39 31 20 31 33 2e 30 39 20 33 20 39 2e 35 20 33 53 33 20 35 2e 39 31 20 33 20 39 2e 35 20 35 2e 39 31 20 31 36 20 39 2e 35 20 31 36 63 31 2e 36 31 20 30 20 33 2e 30 39 2d 2e 35 39 20 34 2e 32 33 2d 31 2e 35 37 6c 2e 32 37 2e 32 38 76 2e 37 39 6c 35 20 34 2e 39 39 4c Data Ascii: <svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" width="200" height="200" viewBox="0 0 24 24"><path d="M15.5 14h-.79l-.28-.27C15.41 12.59 16 11.11 16 9.5 16 5.91 13.09 3 9.5 3S3 5.91 3 9.5 5.91 16 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49760	142.250.181.225	443	4092	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:44:21 UTC	749	OUT	GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://syndicatedsearch.goog/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:44:21 UTC	800	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 200 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 23 Oct 2024 12:35:01 GMT Expires: Thu, 24 Oct 2024 11:35:01 GMT Cache-Control: public, max-age=82800 Last-Modified: Thu, 02 Nov 2023 22:48:00 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Age: 36560 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-23 22:44:21 UTC	200	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 66 66 66 66 66 66 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 77 69 64 74 68 3d 22 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 35 2e 38 38 20 34 2e 31 32 4c 31 33 2e 37 36 20 31 32 6c 2d 37 2e 38 38 20 37 2e 38 38 4c 38 20 32 32 6c 31 30 2d 31 30 4c 38 20 32 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49766	142.250.185.65	443	4092	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:44:23 UTC	507	OUT	GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:44:24 UTC	798	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 391 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 23 Oct 2024 22:28:17 GMT Expires: Thu, 24 Oct 2024 21:28:17 GMT Cache-Control: public, max-age=82800 Age: 967 Last-Modified: Thu, 20 Jul 2023 22:48:00 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-23 22:44:24 UTC	391	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 66 66 66 66 66 66 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 30 30 22 20 68 65 69 67 68 74 3d 22 32 30 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 35 2e 35 20 31 34 68 2d 2e 37 39 6c 2d 2e 32 38 2d 2e 32 37 43 31 35 2e 34 31 20 31 32 2e 35 39 20 31 36 20 31 31 2e 31 31 20 31 36 20 39 2e 35 20 31 36 20 35 2e 39 31 20 31 33 2e 30 39 20 33 20 39 2e 35 20 33 53 33 20 35 2e 39 31 20 33 20 39 2e 35 20 35 2e 39 31 20 31 36 20 39 2e 35 20 31 36 63 31 2e 36 31 20 30 20 33 2e 30 39 2d 2e 35 39 20 34 2e 32 33 2d 31 2e 35 37 6c 2e 32 37 2e 32 38 76 2e 37 39 6c 35 20 34 2e 39 39 4c Data Ascii: <svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" width="200" height="200" viewBox="0 0 24 24"><path d="M15.5 14h-.79l-.28-.27C15.41 12.59 16 11.11 16 9.5 16 5.91 13.09 3 9.5 3S3 5.91 3 9.5 5.91 16 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49765	142.250.185.65	443	4092	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:44:23 UTC	508	OUT	GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:44:24 UTC	800	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 200 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 23 Oct 2024 12:35:01 GMT Expires: Thu, 24 Oct 2024 11:35:01 GMT Cache-Control: public, max-age=82800 Last-Modified: Thu, 02 Nov 2023 22:48:00 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Age: 36563 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-23 22:44:24 UTC	200	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 66 66 66 66 66 66 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 77 69 64 74 68 3d 22 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 35 2e 38 38 20 34 2e 31 32 4c 31 33 2e 37 36 20 31 32 6c 2d 37 2e 38 38 20 37 2e 38 38 4c 38 20 32 32 6c 31 30 2d 31 30 4c 38 20 32 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.4	49772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:00 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:01 UTC	540	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:00 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 21 Oct 2024 13:21:21 GMT ETag: "0x8DCF1D34132B902" x-ms-request-id: 04de7e24-801e-008f-0e20-242c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224500Z-16849878b785f8wh85a0w3ennn00000006x0000000001019 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:01 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-23 22:45:01 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-23 22:45:01 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-23 22:45:01 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-23 22:45:01 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-23 22:45:01 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-23 22:45:01 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-23 22:45:01 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-23 22:45:01 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-23 22:45:02 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.4	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:03 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:03 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:03 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 331d1c77-401e-0029-354e-229b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224503Z-16849878b78hz7zj8u0h2zng1400000006x000000000g238 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:03 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:03 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:03 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:03 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 31a53d7e-801e-00a3-74f7-217cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224503Z-16849878b78k46f8kzwxznephs00000006rg00000000eh9s x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:03 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	49777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:03 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:03 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:03 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 394abe64-001e-0028-050b-22c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224503Z-16849878b787sbpl0sv29sm89s00000006z0000000008xtt x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:03 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:03 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:03 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:03 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 084b2ff6-801e-0067-68fd-24fe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224503Z-r197bdfb6b4kq4j5t834fh90qn00000009y000000000ag9f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:03 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	49776	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:03 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:03 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:03 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: fdb61705-b01e-0001-2f09-2246e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224503Z-16849878b784cpcc2dr9ch74ng00000006ug00000000va0m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:03 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:04 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:04 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:04 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 22602994-801e-00a0-73ef-242196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224504Z-15b8d89586fdmfsg1u7xrpfws000000002g00000000033ge x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:04 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:04 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:04 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:04 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 9c258c29-601e-003e-66f5-243248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224504Z-r197bdfb6b4rkc6mhwyt3e61pc00000000pg00000000w54g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:04 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:04 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:04 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:04 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 0a92035d-201e-00aa-57da-213928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224504Z-16849878b782h9tt5z2wa5rfxg00000006vg000000006unz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:04 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:04 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:04 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:04 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: bcb88dd7-c01e-0079-47cd-21e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224504Z-16849878b787psctgubawhx7k800000006rg000000005k2a x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:04 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:04 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:05 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:04 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 734838af-101e-0065-4be5-214088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224504Z-16849878b78dkr6tqerbnpg1zc00000006sg00000000veah x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:05 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:04 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:05 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:04 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 1ae852e8-d01e-008e-29f5-24387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224504Z-15b8d89586f42m673h1quuee4s000000027g00000000brd9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:05 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:04 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:05 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:04 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 13862abc-a01e-0053-5aa2-218603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224504Z-16849878b78c5zx4gw8tcga1b400000006n000000000v1ac x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:05 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:04 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:05 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:05 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 1b2fb3ba-201e-0033-65ce-20b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224505Z-16849878b78k46f8kzwxznephs00000006n000000000vwde x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:05 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:04 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:05 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:05 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 6ca7d158-d01e-0014-15ac-21ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224505Z-16849878b787c9z7hb8u9yysp000000006v000000000ump4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:05 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:05 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:06 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:06 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 6a28da67-901e-0029-53f3-24274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224506Z-r197bdfb6b4sn8wg20e97vn7ps0000000ngg000000001zey x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:45:06 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:05 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:06 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:06 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 847e2871-001e-0079-66e3-2112e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224506Z-16849878b78z5q7jpbgf6e9mcw00000006y000000000da89 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:06 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:05 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:06 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:06 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 241b467f-801e-0015-2b13-25f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224506Z-r197bdfb6b4kq4j5t834fh90qn00000009zg000000006amt x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:06 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:05 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:06 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:06 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 04b89afe-e01e-0003-7c15-250fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224506Z-r197bdfb6b4kzncf21qcaynxz8000000013g000000002rya x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:06 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:06 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:06 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:06 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 4cd68789-d01e-0017-448e-21b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224506Z-16849878b787sbpl0sv29sm89s00000006w000000000nbur x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:06 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:06 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:07 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:07 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: ab91094f-501e-008f-72f7-219054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224507Z-16849878b78ngdnlw4w0762cms00000006tg00000000zqta x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:07 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:07 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:07 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:07 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 9956b93e-101e-0017-0e1a-2447c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224507Z-r197bdfb6b4h2vctng0a0nubg80000000a10000000006qzb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:07 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:07 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:07 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:07 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 2ab53e8b-001e-0066-7ef2-24561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224507Z-r197bdfb6b4h2vctng0a0nubg800000009z000000000amfd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:07 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:07 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:07 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:07 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: b478c109-d01e-00ad-3dad-24e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224507Z-15b8d89586fqckbz0ssbuzzp1n00000001c0000000004g0b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:07 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:07 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:07 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:07 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 00f7314e-e01e-0052-48ac-21d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224507Z-16849878b78lhh9t0fb3392enw00000006ng00000000tmn3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:07 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:07 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:07 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:07 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 33373380-a01e-003d-4cf5-2498d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224507Z-15b8d89586flspj6y6m5fk442w00000003u000000000kzqr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:45:07 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:07 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:08 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:07 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 393bb9bf-001e-0028-2805-22c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224507Z-16849878b78bkvbz1ry47zvsas00000006xg000000006b74 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:08 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:07 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:08 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:07 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 3cf1b782-701e-0001-32e5-21b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224507Z-16849878b78c2tmb7nhatnd68s00000006y0000000004r9d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:08 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:07 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:08 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:07 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 1290ce53-d01e-002b-7905-2225fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224507Z-16849878b78q4pnrt955f8nkx800000006rg00000000dgsq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:08 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:08 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:08 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:08 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 56a14f83-001e-002b-1ff2-2499f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224508Z-r197bdfb6b4t7wszdvrfk02ah400000008b000000000gp2d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:08 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:08 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:08 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:08 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 999b7e79-701e-001e-6bf4-24f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224508Z-r197bdfb6b4rt57kw3q0f43mqg0000000b2000000000r2ms x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:08 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:08 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:08 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:08 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 5fd7cbed-901e-0048-7ef3-24b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224508Z-r197bdfb6b4tq6ldv3s2dcykm800000000s0000000003nge x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:08 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:08 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:08 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:08 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 5167a131-c01e-0082-697a-25af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224508Z-15b8d89586fsx9lfqmgrbzpgmg0000000dpg000000001wgg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:45:08 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:08 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:08 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:08 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 759c8b5d-301e-003f-27f2-24266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224508Z-15b8d89586fmhkw4gksnr1w3ds0000000dkg000000004m5x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:08 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:08 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:09 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:08 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: af8b8727-001e-00a2-18f5-24d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224508Z-15b8d89586fsx9lfqmgrbzpgmg0000000dkg00000000ba33 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:45:09 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:09 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:09 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:09 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 25f4145c-101e-005a-559b-24882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224509Z-15b8d89586f4zwgbz365q03b0c0000000dq0000000005qzw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:09 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:09 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:09 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:09 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: efc778c0-f01e-0052-4de5-219224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224509Z-16849878b78dsttbr1qw36rxs800000006s000000000wk3g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:09 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:09 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:09 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:09 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: be98e2c6-601e-0001-2b87-21faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224509Z-16849878b78bkvbz1ry47zvsas00000006u000000000q11r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:09 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:09 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:09 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:09 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 3f3879b0-501e-0035-0b40-22c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224509Z-16849878b789m94j7902zfvfr000000006p000000000tkcz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:09 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:09 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:09 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:09 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 07f9ef03-d01e-0014-614d-22ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224509Z-16849878b78p6ttkmyustyrk8s00000006pg00000000nkdd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:09 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:10 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:10 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:10 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 3e897e27-701e-006f-014d-22afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224510Z-16849878b78mhkkf6kbvry07q000000006u0000000004bbz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:45:10 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:10 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:10 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:10 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 40ca5ebb-901e-0048-7827-21b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224510Z-16849878b78plcdqu15wsb886400000006r000000000rddq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:10 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:10 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:10 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:10 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 9658a421-401e-008c-7ff3-2486c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224510Z-15b8d89586f8nxpt5xx0pk7du8000000040g00000000a18x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:45:10 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:10 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:10 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:10 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: a706a42d-501e-008c-4ef2-24cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224510Z-r197bdfb6b4h2vctng0a0nubg800000009y000000000eyt2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:10 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:10 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:10 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:10 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 9b08888b-e01e-0020-65f2-24de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224510Z-r197bdfb6b429k2s6br3k49qn400000003x000000000q443 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:10 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:11 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:11 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:11 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: b92258e0-a01e-00ab-2aab-219106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224511Z-16849878b78gvgmlcfru6nuc5400000006s000000000nzky x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:11 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:11 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:11 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:11 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 71d2c1fc-001e-00a2-01de-21d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224511Z-16849878b78lhh9t0fb3392enw00000006pg00000000pv8m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:11 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:11 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:11 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:11 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 9f494126-c01e-008e-09f4-247381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224511Z-15b8d89586f989rks44whx5v7s0000000d5000000000s8bg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:11 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49822	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:11 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:11 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:11 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 628e7349-b01e-003d-63fd-24d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224511Z-15b8d89586fqj7k5uht6e8nnew0000000cxg00000000szey x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:11 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:11 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:11 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:11 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 2653a72e-001e-005a-26e6-21c3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224511Z-16849878b785g992cz2s9gk35c00000006y000000000491n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:11 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:12 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:12 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:12 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 531fb3e5-001e-00a2-2356-23d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224512Z-r197bdfb6b4b582bwynewx7zgn0000000be000000000s897 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:12 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:12 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:12 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:12 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 13fbacc8-201e-0003-23f4-24f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224512Z-r197bdfb6b4kkm8440c459r6k8000000011g0000000024xf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:12 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:12 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:12 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:12 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 4c87ede1-d01e-0065-6b9c-21b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224512Z-16849878b787psctgubawhx7k800000006hg00000000ydy9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:12 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:12 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:12 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:12 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 14f65908-801e-008f-32d6-202c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224512Z-16849878b78dkr6tqerbnpg1zc00000006w000000000c8fr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:12 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:12 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:12 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:12 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 3892b43a-301e-0051-71f4-2438bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224512Z-15b8d89586fzhrwgk23ex2bvhw0000000100000000000953 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:45:12 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:14 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:14 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:14 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: ee7a308c-c01e-00a1-620b-227e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224514Z-16849878b78k8q5pxkgux3mbgg00000006qg00000000uxsf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:14 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:14 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:14 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:14 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 6a252cba-901e-0029-59f2-24274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224514Z-r197bdfb6b4t7wszdvrfk02ah400000008b000000000gppg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:14 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49833	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:14 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:14 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:14 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: f8de0035-b01e-005c-23fc-244c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224514Z-r197bdfb6b4kkrkjudg185sarw00000000tg00000000wbgg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:14 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49831	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:14 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:14 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:14 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: acb2ef9b-e01e-001f-1f33-221633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224514Z-16849878b78dsttbr1qw36rxs800000006v000000000kb2k x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:14 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:14 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:14 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:14 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: e3ffbf99-001e-0014-2c05-255151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224514Z-r197bdfb6b4k6h5j1g5mvtmsmn0000000b80000000008kp7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:14 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:14 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:15 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:15 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: cea37fdd-f01e-003f-5ff2-24d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224515Z-r197bdfb6b4kkm8440c459r6k80000000110000000003h0e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:45:15 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:14 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:15 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:15 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 43134ec5-e01e-003c-4115-25c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224515Z-r197bdfb6b4t7wszdvrfk02ah400000008a000000000pq4z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:15 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:14 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:15 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:15 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: ac69ef67-e01e-001f-7714-221633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224515Z-16849878b785f8wh85a0w3ennn00000006wg000000002mx4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:15 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:14 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:15 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:15 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 7a3803bc-a01e-0021-4af4-24814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224515Z-15b8d89586f2hk28h0h6zye26c00000000h000000000ftzd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:15 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:15 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:15 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:15 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: fa910cef-e01e-003c-72dd-21c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224515Z-16849878b78s2lqfdex4tmpp7800000006s000000000x5y6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:15 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:15 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:15 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:15 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: f2361012-b01e-003e-18e4-218e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224515Z-16849878b787c9z7hb8u9yysp000000006v000000000unhm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:15 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:15 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:15 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:15 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 34547014-f01e-003f-75cc-20d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224515Z-16849878b787c9z7hb8u9yysp000000006zg000000006zx1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:15 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:15 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:16 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:16 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 096df01f-c01e-0066-45fd-24a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224515Z-r197bdfb6b4k6h5j1g5mvtmsmn0000000ba0000000002mhs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:16 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49835	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:15 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:16 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:16 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: fc13fe58-401e-000a-0af3-244a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224516Z-15b8d89586ffsjj9qb0gmb1stn000000027g00000000qzpx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:45:16 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:16 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:16 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:16 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: a2e914b6-401e-0029-5fce-219b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224516Z-16849878b78hz7zj8u0h2zng14000000070000000000586u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:16 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:16 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:16 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:16 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 28e3a13f-d01e-0049-4f16-25e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224516Z-r197bdfb6b49k6rsrbz098tg8000000003yg00000000hk6h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:16 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:16 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:16 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:16 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: c561987e-801e-0015-0d0b-22f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224516Z-16849878b782h9tt5z2wa5rfxg00000006q000000000wu6c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:16 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:16 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:16 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:16 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 39b78571-501e-0016-43f4-24181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224516Z-15b8d89586fs9clcgrr6f2d6vg00000000y00000000008g2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:45:16 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:16 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:17 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:16 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: c52d6895-f01e-001f-0bd3-205dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224516Z-16849878b78q4pnrt955f8nkx800000006sg000000009c22 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:17 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:17 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:17 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 2f548e5b-201e-003c-5d24-2130f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224517Z-16849878b786vsxz21496wc2qn00000006vg00000000r1n3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:17 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:17 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:17 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 2df5d45d-601e-003e-40f7-213248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224517Z-16849878b7862vlcc7m66axrs000000006ug00000000hesq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:17 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:17 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:17 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:17 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 5a53efb7-001e-0034-5556-23dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224517Z-r197bdfb6b4b582bwynewx7zgn0000000bhg00000000ckg3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:17 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:17 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:17 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 3e8b3e47-701e-006f-544e-22afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224517Z-16849878b78hz7zj8u0h2zng14000000070000000000588w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:17 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:17 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:17 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 0856d5df-001e-00ad-56f3-24554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224517Z-r197bdfb6b4rkc6mhwyt3e61pc00000000ug000000007nfp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:17 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:18 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:18 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:18 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 0eea03f1-d01e-0066-098a-21ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224518Z-16849878b787sbpl0sv29sm89s00000006ug00000000w1vm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:18 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:18 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:18 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:18 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: aaf6fada-701e-0053-683a-223a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224518Z-16849878b7862vlcc7m66axrs000000006ug00000000hetx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:18 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:18 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:18 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:18 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: e5966728-801e-007b-2bf2-24e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224518Z-r197bdfb6b4sn8wg20e97vn7ps0000000ncg00000000cant x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:18 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:18 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:18 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:18 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: d0d0f8e5-601e-000d-298c-212618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224518Z-16849878b78k46f8kzwxznephs00000006s000000000bh5h x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:18 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:18 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:18 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:18 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 39bddb46-501e-0016-72f5-24181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224518Z-15b8d89586fdmfsg1u7xrpfws000000002e0000000008w7g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:18 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:19 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:19 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:19 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: cd6db9b0-d01e-002b-01ae-2425fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224519Z-15b8d89586flspj6y6m5fk442w00000003u000000000m02s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:19 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:19 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:19 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:19 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 999b9529-701e-001e-53f4-24f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224519Z-r197bdfb6b429k2s6br3k49qn400000003yg00000000gafy x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:19 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:19 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:19 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:19 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 55d9b643-201e-003f-330b-226d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224519Z-16849878b78q4pnrt955f8nkx800000006sg000000009c7s x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:19 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49863	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:19 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:19 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:19 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: b140c98b-501e-000a-75f9-240180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224519Z-15b8d89586flzzks5bs37v2b90000000029g00000000tvvn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:19 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49862	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:19 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:19 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:19 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 20049dc1-d01e-0014-1b33-22ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224519Z-16849878b78ngdnlw4w0762cms00000007000000000053mu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:19 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49864	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:20 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:20 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:20 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 81a8cf75-401e-0047-2d15-258597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224520Z-r197bdfb6b4r9fwfbdwymmgex800000000p0000000001rze x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:20 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49865	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:20 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:20 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:20 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 8d011c5a-801e-0047-22f7-217265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224520Z-16849878b78k46f8kzwxznephs00000006s000000000bh89 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:20 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:20 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:20 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:20 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 84d8b792-101e-008e-7ffc-24cf88000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224520Z-15b8d89586ffsjj9qb0gmb1stn00000002d0000000004hfu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:20 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49867	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:20 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:20 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:20 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 998f428a-101e-007a-649d-24047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224520Z-15b8d89586fqckbz0ssbuzzp1n00000001b0000000007sd2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:20 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49868	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:20 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:20 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:20 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 04521c86-e01e-0003-3ff4-240fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224520Z-15b8d89586ffsjj9qb0gmb1stn00000002cg00000000681v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:20 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49869	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:22 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:22 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:22 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 94ed8cc5-801e-0083-11f2-24f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224522Z-15b8d89586fqckbz0ssbuzzp1n000000017g00000000k5rb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:45:22 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49870	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:22 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:22 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:22 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 816a6405-301e-001f-06d8-21aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224522Z-16849878b7842t5ke0k7mzbt3c00000006s00000000047mh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:22 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49872	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:22 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:22 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:22 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 39bddf94-501e-0016-02f5-24181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224522Z-r197bdfb6b4lkrtc7na2dkay28000000023g00000000s277 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:22 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49871	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:22 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:22 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:22 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 9658afd7-401e-008c-2df3-2486c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224522Z-r197bdfb6b4kkrkjudg185sarw00000000xg00000000cnh9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:22 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49873	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:22 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:22 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:22 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 8e7afceb-101e-007a-50f3-24047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224522Z-r197bdfb6b4sn8wg20e97vn7ps0000000nc000000000dn6w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:45:22 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49876	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:22 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:23 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:23 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 62bbcfe8-a01e-0032-2ffc-241949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224523Z-r197bdfb6b4cz6xrsdncwtgzd40000000ngg00000000emxe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:23 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49874	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:22 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:23 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:23 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 53cb03fc-601e-0084-2ff2-246b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224523Z-r197bdfb6b4gdlhqw6kbe0ekvs00000009z0000000002zh6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:23 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49877	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:22 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:23 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:23 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 4c920d0e-c01e-008d-4cca-202eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224523Z-16849878b78rjhv97f3nhawr7s00000006qg00000000wqa3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:23 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49875	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:22 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:23 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:22 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: f9504115-401e-0083-703b-22075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224522Z-16849878b787c9z7hb8u9yysp000000006tg00000000z1m0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:23 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49878	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:23 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:23 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:23 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: cc75a80d-201e-0096-720b-22ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224523Z-16849878b78hz7zj8u0h2zng1400000006xg00000000g1vc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:23 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49879	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:23 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:23 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:23 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 4e335343-a01e-000d-7cf4-24d1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224523Z-r197bdfb6b4rt57kw3q0f43mqg0000000b90000000000cp4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:45:23 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49880	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:23 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:23 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:23 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 39b0b4e4-501e-0016-23f2-24181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224523Z-15b8d89586fxdh48qknu9dqk2g000000024000000000c7n8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:23 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49881	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:23 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:23 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:23 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 5342d47f-d01e-0028-2f83-217896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224523Z-16849878b7862vlcc7m66axrs000000006u000000000mcec x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:23 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49882	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:23 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:23 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:23 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 2192cf97-401e-0016-59aa-2153e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224523Z-16849878b789m94j7902zfvfr000000006p000000000tmde x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:23 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49883	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:24 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:24 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:24 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: fbe9264b-c01e-0046-04f3-242db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224524Z-r197bdfb6b49k6rsrbz098tg8000000003z000000000gx0t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:45:24 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49884	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:24 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:24 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:24 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: b9c92f65-401e-0016-1c27-2153e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224524Z-16849878b78c2tmb7nhatnd68s00000006u000000000mrdg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:24 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49886	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:24 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:24 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:24 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 62a19e75-a01e-0032-1bf3-241949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224524Z-r197bdfb6b429k2s6br3k49qn4000000043g0000000039a0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:24 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49885	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:24 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:24 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:24 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: d2bdf8af-801e-0078-25f4-24bac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224524Z-r197bdfb6b4kkm8440c459r6k800000000v000000000wayt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:24 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49887	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:24 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:24 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:24 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: dfdc7019-701e-000d-68f4-246de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224524Z-15b8d89586fvk4kmwqg9fgbkn800000002eg0000000070z3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:24 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49888	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:25 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:25 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:25 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: e014a2e3-501e-0035-060b-22c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224525Z-16849878b78dkr6tqerbnpg1zc00000006wg00000000a8yc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:25 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49889	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:25 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:25 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:25 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 74c47345-e01e-00aa-3afd-24ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224525Z-15b8d89586f8l5961kfst8fpb000000008g00000000030ka x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:45:25 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49890	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:25 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:25 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:25 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: e1e0bfc6-201e-006e-0e0b-22bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224525Z-16849878b78q4pnrt955f8nkx800000006r000000000fyuy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:25 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49891	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:25 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:25 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:25 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 4e9f4159-f01e-005d-3228-2113ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224525Z-16849878b78p4hmjy4vha5ddqw00000006p000000000scwk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:25 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49892	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:25 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:25 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:25 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: af610e67-501e-007b-1855-225ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224525Z-16849878b78s2lqfdex4tmpp7800000006rg0000000119gk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:25 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49893	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:25 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:26 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:25 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 8522a688-a01e-0084-2768-219ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224525Z-16849878b78c2tmb7nhatnd68s00000006w000000000c1p9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:26 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49894	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:26 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:26 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:26 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 6158f20b-d01e-0028-2cf2-247896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224526Z-r197bdfb6b4tq6ldv3s2dcykm800000000q000000000b6mw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:26 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49896	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:26 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:26 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:26 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: f28e9288-a01e-000d-0d17-24d1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224526Z-15b8d89586ff5l62quxsfe8ugg0000000d50000000005bus x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:26 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49895	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:26 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:26 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:26 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 4481152a-601e-0001-4b55-22faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224526Z-16849878b787psctgubawhx7k800000006p000000000gd3f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:26 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49897	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:26 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:26 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:26 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 6e18d5c3-a01e-00ab-48f4-249106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224526Z-r197bdfb6b4gdlhqw6kbe0ekvs00000009t000000000qgr4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:45:26 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49898	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:26 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:26 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:26 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 697bb720-201e-0071-0781-25ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224526Z-16849878b78ngdnlw4w0762cms00000006vg00000000s34m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:26 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49899	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:27 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:27 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:27 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: af80e16d-001e-00a2-6cf2-24d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224527Z-15b8d89586f8nxpt5xx0pk7du800000003x000000000nhgg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:27 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49901	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:27 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:27 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:27 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: e081a540-501e-0035-2133-22c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224527Z-16849878b78p4hmjy4vha5ddqw00000006v0000000000vag x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:27 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49900	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:27 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:27 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:27 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 3d4cb055-601e-0097-01e5-21f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224527Z-16849878b787psctgubawhx7k800000006sg000000001xra x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:27 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49902	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:27 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:27 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:27 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: efcf68a2-a01e-0084-11f2-249ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224527Z-15b8d89586fst84k5f3z220tec0000000dn0000000000qxw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:45:27 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49903	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:27 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:27 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:27 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 03ef3c5b-d01e-007a-4ff2-24f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224527Z-15b8d89586f42m673h1quuee4s000000028g000000007u2q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:27 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49904	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:28 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:28 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:28 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 1e800eab-b01e-001e-7ff5-240214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224528Z-15b8d89586ff5l62quxsfe8ugg0000000d3000000000c0zx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:28 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49905	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:28 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:28 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:28 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 4bb44360-d01e-005a-0414-227fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224528Z-16849878b78k46f8kzwxznephs00000006n000000000vxqc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:28 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49906	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:28 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:28 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:28 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: 88a9635a-401e-005b-7585-219c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224528Z-16849878b78fmrkt2ukpvh9wh400000006w0000000004cve x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:28 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49907	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:28 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:28 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:28 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 4b1eeebb-201e-0051-0fab-217340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224528Z-16849878b78fmrkt2ukpvh9wh400000006s000000000nqqw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:28 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49908	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:28 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:28 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:28 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: a08c3447-701e-0098-6ef3-24395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224528Z-r197bdfb6b4h2vctng0a0nubg800000009zg00000000aq93 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:28 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49909	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:29 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:29 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:29 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: 10ca92f3-d01e-008e-1b31-22387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224529Z-16849878b78s2lqfdex4tmpp7800000006x000000000940k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:29 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49910	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:29 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:29 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:29 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: aba5bc6a-e01e-0003-59e5-210fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224529Z-16849878b785jsrm4477mv3ezn00000006pg00000000yqhs x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:29 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49911	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:29 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:29 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:29 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 35e941fb-301e-005d-58de-21e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224529Z-16849878b78plcdqu15wsb886400000006wg000000001y2r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:29 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49912	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:45:29 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:45:29 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:45:29 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: 9175bbc6-101e-0028-0656-238f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224529Z-r197bdfb6b4h2vctng0a0nubg800000009xg00000000kn44 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:45:29 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 1012, Parent PID: 5500

General

Target ID:	0
Start time:	18:44:03
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 4092, Parent PID: 1012

General

Target ID:	2
Start time:	18:44:06
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2088 --field-trial-handle=1952,i,3103678846888593772,11420615675697811035,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6384, Parent PID: 5500

General

Target ID:	3
Start time:	18:44:09
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://josecarlosrevoredo.com/"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://josecarlosrevoredo.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 49

Chrome Cache Entry: 50

Chrome Cache Entry: 51

Chrome Cache Entry: 52

Chrome Cache Entry: 53

Chrome Cache Entry: 54

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

Windows Analysis Report
http://josecarlosrevoredo.com/