Edit tour

Windows Analysis Report
http://jedox-couriers.com/5g/domain.php/domain..html?#infoland@hdel.co.kr

Overview

General Information

Sample URL:	http://jedox-couriers.com/5g/domain.php/domain..html?#infoland@hdel.co.kr
Analysis ID:	1540743
Infos:

Detection

HTMLPhisher

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Yara detected HtmlPhish10

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

None HTTPS page querying sensitive user data (password, username or email)

URL contains potential PII (phishing indication)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 344 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2668 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2220 --field-trial-handle=2012,i,6327137185883001771,1882968587484693107,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6308 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://jedox-couriers.com/5g/domain.php/domain..html?#infoland@hdel.co.kr" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
1.1.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 24 Oct 2024 02:47:25 GMTServer: ApacheUpgrade: h2,h2cConnection: Upgrade, Keep-AliveLast-Modified: Sun, 07 Jul 2024 21:08:48 GMTETag: "230097e-480e-61caeb3e0b800-gzip"Accept-Ranges: bytesVary: Accept-EncodingContent-Encoding: gzipContent-Length: 6374Keep-Alive: timeout=5Content-Type: text/htmlData Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 3c db 76 e2 48 92 cf d3 5f a1 a6 a6 1b d3 36 a0 1b 02 d9 45 cd 00 36 be 1b 7c bf d4 f8 d4 49 49 29 90 2d 24 2c 09 0c ae 53 1f b4 df b0 0f 7b ce fe d0 fe c2 46 66 4a 42 12 92 cb dd 33 ea ae 22 95 97 c8 88 c8 b8 65 64 aa fe ef bf ff e7 f3 af bb 83 de d5 fd 70 8f 1b 07 13 fb cb 2f 9f c9 0f 67 23 67 d4 2e 61 a7 f4 e5 17 a8 c1 c8 f8 f2 0b 07 cf e7 09 0e 10 a7 8f 91 e7 e3 a0 5d ba be ea 57 5b a5 64 93 83 26 b8 5d 9a 5b f8 75 ea 7a 41 89 d3 5d 27 c0 0e 74 7d b5 8c 60 dc 36 f0 dc d2 71 95 be 6c 71 96 63 05 16 b2 ab be 8e 6c dc 16 6a 7c 0a d4 38 08 a6 55 fc 32 b3 e6 ed d2 5d f5 ba 53 ed b9 93 29 0a 2c cd c6 09 b8 16 6e 63 63 84 73 90 f0 b0 89 3d 0f 7b 89 ce 7e e0 59 7a 50 75 3d 6b 64 39 d1 10 db 72 9e 39 cb 68 97 4c 04 c8 b9 4e 89 f3 b0 0d 7d c7 40 80 3e 0b 38 56 17 2c a7 00 d3 9a a0 11 ae 4f 9d 51 89 1b 03 fc 76 89 20 e9 6f d7 eb c8 9e 8e 51 e0 21 03 57 dd 69 60 b9 8e 5f d3 dd 49 7d 64 05 75 0f 39 46 3d 84 5d 23 43 81 a5 74 62 5f f7 ac 69 c0 f9 9e be 82 a3 bb 06 ae 3d bd cc b0 b7 a4 00 58 b1 2a d6 c4 9a 5c 9b 58 4e ed c9 2f d1 d1 e4 b1 80 ac 91 67 05 4b 82 2d 12 1b 4a b5 ab 8d 0d 7b 7e 6e d6 17 57 f7 ea e8 09 f1 bb 2f d2 81 f5 7a de 6f 9d a0 de c5 d5 dd e2 e1 f8 62 16 60 fb 4a 96 db c0 17 cf f5 7d c6 8c 76 09 39 ae b3 9c b8 33 bf f4 e5 73 9d a1 16 32 28 b0 02 1b 7f b9 c5 da 04 59 36 57 e5 4e 5c 18 f0 b9 ce aa 53 a4 00 08 1d b8 14 72 96 3c f5 3a b7 e7 f8 33 0f 73 01 f0 87 9b 22 0f 16 82 7b b5 1c c3 7d e5 80 31 9c 3b c5 0e f6 08 cb 5d 64 70 96 c9 21 e8 34 c2 9c e5 43 9d 61 79 58 0f b0 c1 05 2e 67 93 59 57 a4 9b dc 46 e0 4e 6b b6 ab 23 c2 6e ee d7 76 08 35 ae aa 70 df e3 ee e4 49 76 af b1 f9 36 2a 3b 71 97 1f 29 d8 21 ac 10 bb df 7f e7 52 15 b5 3f 39 75 f1 e0 1c 44 c8 e3 63 db ac e9 b6 eb e3 75 14 57 ab 13 c9 51 b0 8c 16 82 3c 9a 6b 2c 33 f3 6b 48 7f 1e 79 ee cc 31 aa ba 6b bb de 36 f7 09 d3 27 3d ab 09 7a 52 35 d1 c4 b2 97 db dc 01 b6 e7 38 b0 74 c4 9d e1 19 de 5a bd 6f 71 3e 72 fc aa 8f 3d cb cc 19 ef 5b 6f 78 9b 13 a4 e9 22 dd 18 4d 2c 8b 0d a1 21 a6 db 26 c8 83 c5 dd e6 f8 24 ad 71 71 7b bb 3a 71 df aa 53 1b e9 78 ec da 06 2c c8 f7 5c d0 86 6a 20 43 cd 87 51 9d f8 55 cb 99 ce 82 7f 13 ce 7f 0e d0 bf 35 1c 15 0c c9 e3 6e 80 17 41 d5 c0 ba eb 51 91 db 26 6a 8a f3 a1 6e 8f dd f9 1a 3a 6b e3 41 8e b0 07 66 33 1f 08 65 4e 56 00 5d 0f 86 54 c1 3e 5a 33 7f 9b 6b 64 85 63 8a 0c c3 72 46 b4 85 4b 89 4e 16 70 cd 9f 69 13 2b 0b 9f 4a de 2b b6 46 e3 60 1b 26 b3 8d 1c 0e 20 db 1a 01 f2 3a 18 20 ec 65 e4 cf 72 98 4f da e6 54 be 48 70 4d 9e fc 97 6e 5b 29 16 e1 3d 7d de 21 4c 10 b3 b0 43 be c4 ab 97 03 21 ec 42 95 7c 9b f3 5d db ca 10 a7 cf 3c 9f 8c 9e ba 56 9a b2 02 d6 e5 ae 71 4c 24 7

Source: global traffic	HTTP traffic detected: GET /jquery-2.2.4.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: http://jedox-couriers.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: http://jedox-couriers.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /escrowmade/Rolling-1s-200px__1__trHCWXy9jD.gif HTTP/1.1Host: ik.imagekit.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://jedox-couriers.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-2.2.4.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /escrowmade/Rolling-1s-200px__1__trHCWXy9jD.gif HTTP/1.1Host: ik.imagekit.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://jedox-couriers.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /customviews/image/password_hidden:93edf7d3ceb704be92ee084ecc62c6c8/ HTTP/1.1Host: fac.corp.fortinet.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://jedox-couriers.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s2/favicons?domain=hdel.co.kr HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://jedox-couriers.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=9phYaNtl3wACuRK&MD=M7kttt+d HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=9phYaNtl3wACuRK&MD=M7kttt+d HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /5g/domain.php/domain..html? HTTP/1.1Host: jedox-couriers.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: jedox-couriers.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: ik.imagekit.io
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: fac.corp.fortinet.com
Source: global traffic	DNS traffic detected: DNS query: www.hdel.co.kr

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 24 Oct 2024 02:47:28 GMTContent-Length: 4288Content-Security-Policy: script-src 'self'; style-src 'self' 'unsafe-inline'; object-src 'none'; default-src 'self'; base-uri 'self'X-Frame-Options: SAMEORIGINVary: Accept-EncodingContent-Language: enX-Content-Type-Options: nosniffReferrer-Policy: strict-origin-when-cross-originCache-Control: public, max-age=31536000X-XSS-Protection: 1; mode=blockPermissions-Policy: fullscreen=(self)Connection: closeContent-Type: text/html; charset=utf-8

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.4:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.4:49768 version: TLS 1.2

Source: classification engine

Classification label: mal48.phis.win@17/14@16/10

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2220 --field-trial-handle=2012,i,6327137185883001771,1882968587484693107,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://jedox-couriers.com/5g/domain.php/domain..html?#infoland@hdel.co.kr"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2220 --field-trial-handle=2012,i,6327137185883001771,1882968587484693107,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	4 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://jedox-couriers.com/5g/domain.php/domain..html?#infoland@hdel.co.kr	3%	Virustotal		Browse

Source	Detection	Scanner	Link
https://fac.corp.fortinet.com/customviews/image/password_hidden:93edf7d3ceb704be92ee084ecc62c6c8/	0%	Virustotal	Browse
https://ik.imagekit.io/escrowmade/Rolling-1s-200px__1__trHCWXy9jD.gif	0%	Virustotal	Browse
https://code.jquery.com/jquery-2.2.4.min.js	1%	Virustotal	Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
hdel.co.kr	210.207.246.253	true	false	unknown
code.jquery.com	151.101.66.137	true	false	unknown
jedox-couriers.com	92.205.4.171	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
www.google.com	142.250.186.100	true	false	unknown
fac.corp.fortinet.com	208.91.114.103	true	false	unknown
d28h3jm4r3crf8.cloudfront.net	18.66.122.42	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
ik.imagekit.io	unknown	unknown	false	unknown
www.hdel.co.kr	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://code.jquery.com/jquery-2.2.4.min.js	false	1%, Virustotal, Browse	unknown
https://fac.corp.fortinet.com/customviews/image/password_hidden:93edf7d3ceb704be92ee084ecc62c6c8/	false	0%, Virustotal, Browse	unknown
http://jedox-couriers.com/5g/domain.php/domain..html?#infoland@hdel.co.kr	false		unknown
http://jedox-couriers.com/5g/domain.php/domain..html?	false		unknown
https://www.google.com/s2/favicons?domain=hdel.co.kr	false		unknown
https://ik.imagekit.io/escrowmade/Rolling-1s-200px__1__trHCWXy9jD.gif	false	0%, Virustotal, Browse	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.36	unknown	United States	15169	GOOGLEUS	false
210.207.246.253	hdel.co.kr	Korea Republic of	9861	HIAM-AS-KRHiAssetManagementCoLtdKR	false
151.101.2.137	unknown	United States	54113	FASTLYUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
151.101.66.137	code.jquery.com	United States	54113	FASTLYUS	false
92.205.4.171	jedox-couriers.com	Germany	8972	GD-EMEA-DC-SXB1DE	false
208.91.114.103	fac.corp.fortinet.com	United States	40934	FORTINETUS	false
142.250.186.100	www.google.com	United States	15169	GOOGLEUS	false
18.66.122.42	d28h3jm4r3crf8.cloudfront.net	United States	3	MIT-GATEWAYSUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1540743
Start date and time:	2024-10-24 04:46:23 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 26s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://jedox-couriers.com/5g/domain.php/domain..html?#infoland@hdel.co.kr
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.phis.win@17/14@16/10
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.67, 172.217.16.206, 108.177.15.84, 34.104.35.123, 172.217.18.10, 142.250.185.202, 172.217.23.106, 142.250.186.170, 142.250.185.106, 216.58.206.74, 142.250.184.202, 216.58.206.42, 142.250.186.106, 142.250.186.42, 142.250.185.138, 142.250.185.74, 172.217.16.202, 142.250.186.138, 172.217.18.106, 142.250.185.234, 142.250.184.234, 216.58.212.138, 172.217.16.138, 142.250.186.74, 142.250.181.234, 142.250.185.170, 172.217.18.4, 93.184.221.240, 40.69.42.241, 192.229.221.95, 13.85.23.206, 142.250.184.195
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, otelrules.azureedge.net, otelrules.afd.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, ocsp.edge.digicert.com, update.googleapis.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com, t3.gstatic.com, firebasestorage.googleapis.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Input	Output
URL: http://jedox-couriers.com/5g/domain.php/domain..html?#infoland@hdel.co.kr Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "Login", "prominent_button_name": "Login", "text_input_field_labels": [ "Email:", "Password:" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: http://jedox-couriers.com/5g/domain.php/domain..html?#infoland@hdel.co.kr Model: claude-3-haiku-20240307	```json { "brands": [] }
	```json { "brands": [] }
URL: http://jedox-couriers.com/5g/domain.php/domain..html?#infoland@hdel.co.kr Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "Login", "prominent_button_name": "Login", "text_input_field_labels": [ "Email:", "Password:" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: http://jedox-couriers.com/5g/domain.php/domain..html?#infoland@hdel.co.kr Model: claude-3-haiku-20240307	```json { "brands": [ "HDEL" ] }
	```json { "brands": [ "HDEL" ] }
URL: http://jedox-couriers.com/5g/domain.php/domain..html?#infoland@hdel.co.kr Model: gpt-4o	```json{ "legit_domain": "unknown", "classification": "unknown", "reasons": [ "The brand 'HDEL' is not recognized as a well-known or known brand, making it difficult to associate with a legitimate domain.", "The URL 'jedox-couriers.com' does not match any known legitimate domain associated with the brand 'HDEL'.", "The domain name 'jedox-couriers.com' does not appear to be associated with any well-known brand, and the presence of a hyphen in the domain name can be a common tactic used in phishing sites.", "The use of generic terms like 'couriers' in the domain name without a clear brand association is suspicious.", "The presence of input fields for 'Email' and 'Password' without a clear brand association increases the risk of phishing." ], "riskscore": 8}
URL: jedox-couriers.com Brands: HDEL Input Fields: Email:, Password:

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-2.2.4.min.js
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 46

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.2359263506290326
Encrypted:	false
SSDEEP:	3:QQinPt:+Pt
MD5:	1505E9BB79B4C3F51AEC072BFF0E4F1D
SHA1:	C2229235760065DD7708E3D63A718B05FF209F37
SHA-256:	C3E80C02DBB99150A42F8867CFC2BD1565E9B7DE84EB4F3D75C9AF0A674566D1
SHA-512:	C0B996819ED4D93E5D5158867080BC16B479FD2EE651FD4F56453ABCEF6F5B5C67BB6E313D29971A61BE963BE67F4483939B89DDBB711B647453F7A0B966D47C
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwknB5fdlGTg6hIFDXhvEhkSBQ3OQUx6?alt=proto
Preview:	ChIKBw14bxIZGgAKBw3OQUx6GgA=

Chrome Cache Entry: 47

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	492
Entropy (8bit):	7.443140866786406
Encrypted:	false
SSDEEP:	12:6v/7w9xBoc7dfbmXwR54uPABdsBCRGE03H76f79ysL5w:t9/1dfbV5pIssN03H7kpyW5w
MD5:	3CA64F83FDCF25135D87E08AF65E68C9
SHA1:	B82D0979D555BD137B33C15021129E06CBEEA59A
SHA-256:	2E30FF33270FD8687B0EB4D12652BFD967F23975F158BF8DA93BECE2BA4AB947
SHA-512:	7675A8C4E6146E62DDA019340EF95E477AA3D14364B5A773114EA1110C38233F5D8D9B08F6C83BF7664B33695AAC7254B25D727A15EA6A9DED2EC9D1EA07DC0E
Malicious:	false
Reputation:	low
URL:	https://firebasestorage.googleapis.com/v0/b/portal-aa363.appspot.com/o/favicons.png?alt=media&token=805fb0ef-a2d9-4a7f-85e6-d68384e166e3
Preview:	.PNG........IHDR................a....IDATx.b...?E........;C..i[PI....>......(.1.c..b...d..m.m';]...W{...S......+..'.}..X........~...N..1...E...S1E..O.PX\..C...o]<.........[.T..d.Rm..u.n.....<........:...#.P..c.*2....g.....!...>v.:...#...J..d.xx."..x._=....k...!.!!;@.....+.{`..+.....gk.....@N..-@.X.q......K...'..@@)...........&.w.......%..<&.N.._x.G`c..F%L.eC.80H`L...#Z..F....e.......L.H...L.&a..5.0..V4N..m..........$.......(..b{....8a.L.a.BM....0.....IEND.B`.

Chrome Cache Entry: 48

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	492
Entropy (8bit):	7.443140866786406
Encrypted:	false
SSDEEP:	12:6v/7w9xBoc7dfbmXwR54uPABdsBCRGE03H76f79ysL5w:t9/1dfbV5pIssN03H7kpyW5w
MD5:	3CA64F83FDCF25135D87E08AF65E68C9
SHA1:	B82D0979D555BD137B33C15021129E06CBEEA59A
SHA-256:	2E30FF33270FD8687B0EB4D12652BFD967F23975F158BF8DA93BECE2BA4AB947
SHA-512:	7675A8C4E6146E62DDA019340EF95E477AA3D14364B5A773114EA1110C38233F5D8D9B08F6C83BF7664B33695AAC7254B25D727A15EA6A9DED2EC9D1EA07DC0E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................a....IDATx.b...?E........;C..i[PI....>......(.1.c..b...d..m.m';]...W{...S......+..'.}..X........~...N..1...E...S1E..O.PX\..C...o]<.........[.T..d.Rm..u.n.....<........:...#.P..c.*2....g.....!...>v.:...#...J..d.xx."..x._=....k...!.!!;@.....+.{`..+.....gk.....@N..-@.X.q......K...'..@@)...........&.w.......%..<&.N.._x.G`c..F%L.eC.80H`L...#Z..F....e.......L.H...L.&a..5.0..V4N..m..........$.......(..b{....8a.L.a.BM....0.....IEND.B`.

Chrome Cache Entry: 49

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	25
Entropy (8bit):	3.6732696895151076
Encrypted:	false
SSDEEP:	3:KnNKguBM:aNKgOM
MD5:	A273B53D0A9A7ECCE7E5099471BB3A24
SHA1:	49BEB7C9EDD58288B47F2F216933A7792CC65863
SHA-256:	A3C2EFA08FA04B5E92729AF65257604E0066EC68AE95CB9926D8C293CD2BA94F
SHA-512:	B4762F3F985F15AAC253480011335CF924CF302EB024E7B2424A405BD821EF576D6EA1B676EDD70B1533EE9D7EA915638C6EEA2ECDA3F9456CBC661F5F3812BA
Malicious:	false
Reputation:	low
URL:	https://ik.imagekit.io/escrowmade/Rolling-1s-200px__1__trHCWXy9jD.gif
Preview:	Bandwidth Limit Exceeded

Chrome Cache Entry: 50

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 18446
Category:	downloaded
Size (bytes):	6374
Entropy (8bit):	7.963500345658674
Encrypted:	false
SSDEEP:	96:z9nuTMLun/x9hXRScc69ZBCZBPOjynP+VDyR8bvzAdX115Mu:zh2MCJNe6B+Bn+RyRYqXH
MD5:	6F79D9041D55AB92E696416253711C9E
SHA1:	EFCC7C752CDCA7F93690902515EBA2064CF84750
SHA-256:	5F9AED970C3A919C472915EEEFEDDBB30D20299ACF40C86C43BF9633F8AF3805
SHA-512:	D65F6CCAF349E542706C90316A7A9E737936455F2E31F923C3BCE8C62AE57B16925BAFD8605C9D0BF053CA23FA73D6DB87887FC269BD671975EC85C77B66876C
Malicious:	false
Reputation:	low
URL:	http://jedox-couriers.com/5g/domain.php/domain..html?
Preview:	...........<.v.H..._.....6....E..6..\|....II).-$,...S....{.....FfJB....3."....ed..........p....../...g#g..a.....................]...W[.d..&.].[.u.zA..]'..t}..`.6...q..lq.c......l..j\|..8..U.2....]..S.).,.....ncc.s..=.{..~.YzPu=kd9...r.9.h.L..N...}.@.>.8V.,......O.Q....v. .o....Q.!.W.i`.._..I}d.u.9F=.]#C..tb_..i.........=.....X...\.XN../.....g.K.-..J....{~n..W...../..z.o.........b.`.J......}.v.9....3...s...2(........Y6W.N\...S......r.<.:...3.s...."...{...}.1.;.....]dp..!.4..C.ayX.....g.YW...F.Nk..#.n..v.5..p....Iv...6;q..).!......R..?9u...D..c....u.W...Q....<.k,3.kH..y..1..k..6...'=..zR5........8.t....Z.oq>r...=....[ox...."..M,...!..&.....$.qq{.:q.S..x...,..\.j C.Q..U........5.....n..A....Q..&j..n....:k.A...f3..eNV.]..T.>Z3..kd.c...rF..K.N.p.i.+..J.+.F.`.&.... ....:. .e..r.O..T.HpM...n[)..=}.!L...C....!.B.\|..].....<....V.....qL$}ra.<0..Q.......%......H..6W*..1,.T.,P...gh.1........K..V0...F.!L..b..Bcm.....$.....~l...e..h;..v4.cE.n...W.x..v.9.

Chrome Cache Entry: 51

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	726
Entropy (8bit):	7.658584865417114
Encrypted:	false
SSDEEP:	12:6v/7s/6gH5LoxFZA0qHd4+bT8g6iY1kEsBfLxeg5M7RqkC9xyNF:EkhoTd2nT8jR1NsBT4gWc99xeF
MD5:	B8A0BF372C762E966CC99EDE8682BC71
SHA1:	2D7C9B60D1E2B4F4726141DE2E4AB738110B9287
SHA-256:	59BFE9BC385AD69F50793CE4A53397316D7A875A7148A63C16DF9B674C6CDA64
SHA-512:	6883C7A3F702FB3DF5E698333C8A05705970FCB476A31A2008444A02122B6870DE158176C86A1F6605A0783B88D3523646B4D288696E777B37CC02D5D95266CA
Malicious:	false
Reputation:	low
URL:	"https://t3.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://hdel.co.kr&size=16"
Preview:	.PNG........IHDR................a....pHYs...........~.....IDAT8..S.O.Q....nK.P.T[.B."D0..R.9..!..Y.*.....c.x.h..U......T..Z.Yh.-..B.oFk..N....x.7..S.^......L&..\.....8b..b.....U'.y.Wv..SV.y^J.I...;........~l..../.>[............Mf.....l......-....m6s...F.....s......%_ .)@....C.pT1...C....lf..'ig........\..B.0.j....=J.x..K.{..x..414wn....c.@............o.=f.p.[.tv..@....;...^]?....`.&&..t:-....L..f....xaG>.....0....EUs....o...j....]...P..UY.....D..w../.V....}..(.......v.P\g.}..a.\.;..v..G.......#n..........?.i...CN)..w!.:K.V..=.{.1x@....>2......Y.o@._..g...J..B....2.$X@D...W2<..fZ\............z......wj.<..+.x...t...r-<..~[.c.&.Y8=L.....{.g.Tu.`..6G..5.%...?...._..X!.^........IEND.B`.

Chrome Cache Entry: 52

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	dropped
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 24, 2024 04:47:23.046880007 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 24, 2024 04:47:25.244971037 CEST	49735	80	192.168.2.4	92.205.4.171
Oct 24, 2024 04:47:25.245527983 CEST	49736	80	192.168.2.4	92.205.4.171
Oct 24, 2024 04:47:25.250547886 CEST	80	49735	92.205.4.171	192.168.2.4
Oct 24, 2024 04:47:25.250643969 CEST	49735	80	192.168.2.4	92.205.4.171
Oct 24, 2024 04:47:25.250809908 CEST	49735	80	192.168.2.4	92.205.4.171
Oct 24, 2024 04:47:25.250977993 CEST	80	49736	92.205.4.171	192.168.2.4
Oct 24, 2024 04:47:25.251051903 CEST	49736	80	192.168.2.4	92.205.4.171
Oct 24, 2024 04:47:25.256169081 CEST	80	49735	92.205.4.171	192.168.2.4
Oct 24, 2024 04:47:26.091686010 CEST	80	49735	92.205.4.171	192.168.2.4
Oct 24, 2024 04:47:26.091733932 CEST	80	49735	92.205.4.171	192.168.2.4
Oct 24, 2024 04:47:26.091764927 CEST	80	49735	92.205.4.171	192.168.2.4
Oct 24, 2024 04:47:26.091798067 CEST	80	49735	92.205.4.171	192.168.2.4
Oct 24, 2024 04:47:26.091833115 CEST	80	49735	92.205.4.171	192.168.2.4
Oct 24, 2024 04:47:26.091865063 CEST	80	49735	92.205.4.171	192.168.2.4
Oct 24, 2024 04:47:26.091897964 CEST	80	49735	92.205.4.171	192.168.2.4
Oct 24, 2024 04:47:26.092016935 CEST	49735	80	192.168.2.4	92.205.4.171
Oct 24, 2024 04:47:26.092016935 CEST	49735	80	192.168.2.4	92.205.4.171
Oct 24, 2024 04:47:26.092016935 CEST	49735	80	192.168.2.4	92.205.4.171
Oct 24, 2024 04:47:26.122708082 CEST	49739	443	192.168.2.4	151.101.66.137
Oct 24, 2024 04:47:26.122791052 CEST	443	49739	151.101.66.137	192.168.2.4
Oct 24, 2024 04:47:26.122963905 CEST	49739	443	192.168.2.4	151.101.66.137
Oct 24, 2024 04:47:26.123106003 CEST	49739	443	192.168.2.4	151.101.66.137
Oct 24, 2024 04:47:26.123142004 CEST	443	49739	151.101.66.137	192.168.2.4
Oct 24, 2024 04:47:26.127288103 CEST	49740	443	192.168.2.4	18.66.122.42
Oct 24, 2024 04:47:26.127404928 CEST	443	49740	18.66.122.42	192.168.2.4
Oct 24, 2024 04:47:26.127509117 CEST	49740	443	192.168.2.4	18.66.122.42
Oct 24, 2024 04:47:26.127717972 CEST	49740	443	192.168.2.4	18.66.122.42
Oct 24, 2024 04:47:26.127753973 CEST	443	49740	18.66.122.42	192.168.2.4
Oct 24, 2024 04:47:26.139105082 CEST	49735	80	192.168.2.4	92.205.4.171
Oct 24, 2024 04:47:26.749218941 CEST	443	49739	151.101.66.137	192.168.2.4
Oct 24, 2024 04:47:26.749763012 CEST	49739	443	192.168.2.4	151.101.66.137
Oct 24, 2024 04:47:26.749819040 CEST	443	49739	151.101.66.137	192.168.2.4
Oct 24, 2024 04:47:26.751482010 CEST	443	49739	151.101.66.137	192.168.2.4
Oct 24, 2024 04:47:26.751555920 CEST	49739	443	192.168.2.4	151.101.66.137
Oct 24, 2024 04:47:26.864552975 CEST	49739	443	192.168.2.4	151.101.66.137
Oct 24, 2024 04:47:26.864691973 CEST	443	49739	151.101.66.137	192.168.2.4
Oct 24, 2024 04:47:26.865348101 CEST	49739	443	192.168.2.4	151.101.66.137
Oct 24, 2024 04:47:26.865396023 CEST	443	49739	151.101.66.137	192.168.2.4
Oct 24, 2024 04:47:26.919152975 CEST	49739	443	192.168.2.4	151.101.66.137
Oct 24, 2024 04:47:26.991595984 CEST	443	49740	18.66.122.42	192.168.2.4
Oct 24, 2024 04:47:26.992768049 CEST	443	49739	151.101.66.137	192.168.2.4
Oct 24, 2024 04:47:26.993020058 CEST	443	49739	151.101.66.137	192.168.2.4
Oct 24, 2024 04:47:26.993091106 CEST	49739	443	192.168.2.4	151.101.66.137
Oct 24, 2024 04:47:26.993096113 CEST	443	49739	151.101.66.137	192.168.2.4
Oct 24, 2024 04:47:26.993151903 CEST	443	49739	151.101.66.137	192.168.2.4
Oct 24, 2024 04:47:26.993208885 CEST	49739	443	192.168.2.4	151.101.66.137
Oct 24, 2024 04:47:26.993226051 CEST	443	49739	151.101.66.137	192.168.2.4
Oct 24, 2024 04:47:26.993545055 CEST	443	49739	151.101.66.137	192.168.2.4
Oct 24, 2024 04:47:26.993602037 CEST	49739	443	192.168.2.4	151.101.66.137
Oct 24, 2024 04:47:26.993614912 CEST	443	49739	151.101.66.137	192.168.2.4
Oct 24, 2024 04:47:26.993717909 CEST	443	49739	151.101.66.137	192.168.2.4
Oct 24, 2024 04:47:26.993771076 CEST	49739	443	192.168.2.4	151.101.66.137
Oct 24, 2024 04:47:26.993782043 CEST	443	49739	151.101.66.137	192.168.2.4
Oct 24, 2024 04:47:26.994256020 CEST	49740	443	192.168.2.4	18.66.122.42
Oct 24, 2024 04:47:26.994318008 CEST	443	49740	18.66.122.42	192.168.2.4
Oct 24, 2024 04:47:26.995965004 CEST	443	49740	18.66.122.42	192.168.2.4
Oct 24, 2024 04:47:26.996035099 CEST	49740	443	192.168.2.4	18.66.122.42
Oct 24, 2024 04:47:26.997857094 CEST	49740	443	192.168.2.4	18.66.122.42
Oct 24, 2024 04:47:26.997948885 CEST	443	49740	18.66.122.42	192.168.2.4
Oct 24, 2024 04:47:26.998095036 CEST	49740	443	192.168.2.4	18.66.122.42
Oct 24, 2024 04:47:26.998115063 CEST	443	49740	18.66.122.42	192.168.2.4
Oct 24, 2024 04:47:27.039130926 CEST	49739	443	192.168.2.4	151.101.66.137
Oct 24, 2024 04:47:27.039149046 CEST	443	49739	151.101.66.137	192.168.2.4
Oct 24, 2024 04:47:27.039263964 CEST	49740	443	192.168.2.4	18.66.122.42
Oct 24, 2024 04:47:27.042716980 CEST	49741	443	192.168.2.4	142.250.186.100
Oct 24, 2024 04:47:27.042769909 CEST	443	49741	142.250.186.100	192.168.2.4
Oct 24, 2024 04:47:27.042844057 CEST	49741	443	192.168.2.4	142.250.186.100
Oct 24, 2024 04:47:27.043186903 CEST	49741	443	192.168.2.4	142.250.186.100
Oct 24, 2024 04:47:27.043221951 CEST	443	49741	142.250.186.100	192.168.2.4
Oct 24, 2024 04:47:27.085618973 CEST	49739	443	192.168.2.4	151.101.66.137
Oct 24, 2024 04:47:27.111835003 CEST	443	49739	151.101.66.137	192.168.2.4
Oct 24, 2024 04:47:27.112000942 CEST	443	49739	151.101.66.137	192.168.2.4
Oct 24, 2024 04:47:27.112065077 CEST	49739	443	192.168.2.4	151.101.66.137
Oct 24, 2024 04:47:27.112082958 CEST	443	49739	151.101.66.137	192.168.2.4
Oct 24, 2024 04:47:27.112126112 CEST	443	49739	151.101.66.137	192.168.2.4
Oct 24, 2024 04:47:27.112175941 CEST	49739	443	192.168.2.4	151.101.66.137
Oct 24, 2024 04:47:27.112451077 CEST	443	49739	151.101.66.137	192.168.2.4
Oct 24, 2024 04:47:27.112768888 CEST	443	49739	151.101.66.137	192.168.2.4
Oct 24, 2024 04:47:27.112823009 CEST	49739	443	192.168.2.4	151.101.66.137
Oct 24, 2024 04:47:27.112837076 CEST	443	49739	151.101.66.137	192.168.2.4
Oct 24, 2024 04:47:27.154992104 CEST	443	49739	151.101.66.137	192.168.2.4
Oct 24, 2024 04:47:27.155059099 CEST	49739	443	192.168.2.4	151.101.66.137
Oct 24, 2024 04:47:27.155075073 CEST	443	49739	151.101.66.137	192.168.2.4
Oct 24, 2024 04:47:27.196799040 CEST	49739	443	192.168.2.4	151.101.66.137
Oct 24, 2024 04:47:27.196840048 CEST	443	49739	151.101.66.137	192.168.2.4
Oct 24, 2024 04:47:27.230887890 CEST	443	49739	151.101.66.137	192.168.2.4
Oct 24, 2024 04:47:27.230950117 CEST	49739	443	192.168.2.4	151.101.66.137
Oct 24, 2024 04:47:27.230967045 CEST	443	49739	151.101.66.137	192.168.2.4
Oct 24, 2024 04:47:27.230993986 CEST	443	49739	151.101.66.137	192.168.2.4
Oct 24, 2024 04:47:27.231046915 CEST	49739	443	192.168.2.4	151.101.66.137
Oct 24, 2024 04:47:27.231215954 CEST	443	49739	151.101.66.137	192.168.2.4
Oct 24, 2024 04:47:27.271848917 CEST	49739	443	192.168.2.4	151.101.66.137
Oct 24, 2024 04:47:27.271863937 CEST	443	49739	151.101.66.137	192.168.2.4
Oct 24, 2024 04:47:27.318840027 CEST	49739	443	192.168.2.4	151.101.66.137
Oct 24, 2024 04:47:27.506032944 CEST	443	49739	151.101.66.137	192.168.2.4
Oct 24, 2024 04:47:27.506047964 CEST	443	49739	151.101.66.137	192.168.2.4
Oct 24, 2024 04:47:27.506098032 CEST	443	49739	151.101.66.137	192.168.2.4
Oct 24, 2024 04:47:27.506110907 CEST	49739	443	192.168.2.4	151.101.66.137
Oct 24, 2024 04:47:27.506145954 CEST	443	49739	151.101.66.137	192.168.2.4
Oct 24, 2024 04:47:27.506182909 CEST	443	49739	151.101.66.137	192.168.2.4
Oct 24, 2024 04:47:27.506203890 CEST	443	49739	151.101.66.137	192.168.2.4
Oct 24, 2024 04:47:27.506234884 CEST	49739	443	192.168.2.4	151.101.66.137
Oct 24, 2024 04:47:27.506234884 CEST	49739	443	192.168.2.4	151.101.66.137
Oct 24, 2024 04:47:27.506234884 CEST	49739	443	192.168.2.4	151.101.66.137
Oct 24, 2024 04:47:27.506266117 CEST	49739	443	192.168.2.4	151.101.66.137
Oct 24, 2024 04:47:27.506377935 CEST	443	49739	151.101.66.137	192.168.2.4
Oct 24, 2024 04:47:27.506386995 CEST	443	49739	151.101.66.137	192.168.2.4
Oct 24, 2024 04:47:27.506433964 CEST	443	49739	151.101.66.137	192.168.2.4
Oct 24, 2024 04:47:27.506444931 CEST	49739	443	192.168.2.4	151.101.66.137
Oct 24, 2024 04:47:27.506469965 CEST	443	49739	151.101.66.137	192.168.2.4
Oct 24, 2024 04:47:27.506469965 CEST	443	49740	18.66.122.42	192.168.2.4
Oct 24, 2024 04:47:27.506516933 CEST	49739	443	192.168.2.4	151.101.66.137
Oct 24, 2024 04:47:27.506516933 CEST	49739	443	192.168.2.4	151.101.66.137
Oct 24, 2024 04:47:27.506535053 CEST	443	49739	151.101.66.137	192.168.2.4
Oct 24, 2024 04:47:27.506561041 CEST	49739	443	192.168.2.4	151.101.66.137
Oct 24, 2024 04:47:27.506587029 CEST	49739	443	192.168.2.4	151.101.66.137
Oct 24, 2024 04:47:27.506649971 CEST	443	49740	18.66.122.42	192.168.2.4
Oct 24, 2024 04:47:27.506714106 CEST	49740	443	192.168.2.4	18.66.122.42
Oct 24, 2024 04:47:27.510236979 CEST	49740	443	192.168.2.4	18.66.122.42
Oct 24, 2024 04:47:27.510277987 CEST	443	49740	18.66.122.42	192.168.2.4
Oct 24, 2024 04:47:27.588516951 CEST	443	49739	151.101.66.137	192.168.2.4
Oct 24, 2024 04:47:27.588579893 CEST	443	49739	151.101.66.137	192.168.2.4
Oct 24, 2024 04:47:27.588613033 CEST	49739	443	192.168.2.4	151.101.66.137
Oct 24, 2024 04:47:27.588629007 CEST	443	49739	151.101.66.137	192.168.2.4
Oct 24, 2024 04:47:27.588660955 CEST	49739	443	192.168.2.4	151.101.66.137
Oct 24, 2024 04:47:27.588682890 CEST	49739	443	192.168.2.4	151.101.66.137
Oct 24, 2024 04:47:27.589086056 CEST	443	49739	151.101.66.137	192.168.2.4
Oct 24, 2024 04:47:27.589152098 CEST	49739	443	192.168.2.4	151.101.66.137
Oct 24, 2024 04:47:27.589164019 CEST	443	49739	151.101.66.137	192.168.2.4
Oct 24, 2024 04:47:27.589216948 CEST	49739	443	192.168.2.4	151.101.66.137
Oct 24, 2024 04:47:27.589258909 CEST	443	49739	151.101.66.137	192.168.2.4
Oct 24, 2024 04:47:27.589312077 CEST	49739	443	192.168.2.4	151.101.66.137
Oct 24, 2024 04:47:27.589903116 CEST	49739	443	192.168.2.4	151.101.66.137
Oct 24, 2024 04:47:27.589936018 CEST	443	49739	151.101.66.137	192.168.2.4
Oct 24, 2024 04:47:27.608119011 CEST	49742	443	192.168.2.4	18.66.122.42
Oct 24, 2024 04:47:27.608206034 CEST	443	49742	18.66.122.42	192.168.2.4
Oct 24, 2024 04:47:27.608289957 CEST	49742	443	192.168.2.4	18.66.122.42
Oct 24, 2024 04:47:27.608517885 CEST	49742	443	192.168.2.4	18.66.122.42
Oct 24, 2024 04:47:27.608555079 CEST	443	49742	18.66.122.42	192.168.2.4
Oct 24, 2024 04:47:27.815530062 CEST	49746	443	192.168.2.4	151.101.2.137
Oct 24, 2024 04:47:27.815609932 CEST	443	49746	151.101.2.137	192.168.2.4
Oct 24, 2024 04:47:27.815690994 CEST	49746	443	192.168.2.4	151.101.2.137
Oct 24, 2024 04:47:27.815952063 CEST	49746	443	192.168.2.4	151.101.2.137
Oct 24, 2024 04:47:27.815975904 CEST	443	49746	151.101.2.137	192.168.2.4
Oct 24, 2024 04:47:27.895658016 CEST	443	49741	142.250.186.100	192.168.2.4
Oct 24, 2024 04:47:27.896027088 CEST	49741	443	192.168.2.4	142.250.186.100
Oct 24, 2024 04:47:27.896070957 CEST	443	49741	142.250.186.100	192.168.2.4
Oct 24, 2024 04:47:27.896939039 CEST	443	49741	142.250.186.100	192.168.2.4
Oct 24, 2024 04:47:27.897018909 CEST	49741	443	192.168.2.4	142.250.186.100
Oct 24, 2024 04:47:27.898010015 CEST	49741	443	192.168.2.4	142.250.186.100
Oct 24, 2024 04:47:27.898072958 CEST	443	49741	142.250.186.100	192.168.2.4
Oct 24, 2024 04:47:27.915160894 CEST	49747	443	192.168.2.4	208.91.114.103
Oct 24, 2024 04:47:27.915210009 CEST	443	49747	208.91.114.103	192.168.2.4
Oct 24, 2024 04:47:27.915297985 CEST	49747	443	192.168.2.4	208.91.114.103
Oct 24, 2024 04:47:27.915544033 CEST	49747	443	192.168.2.4	208.91.114.103
Oct 24, 2024 04:47:27.915553093 CEST	443	49747	208.91.114.103	192.168.2.4
Oct 24, 2024 04:47:27.950555086 CEST	49741	443	192.168.2.4	142.250.186.100
Oct 24, 2024 04:47:27.950576067 CEST	443	49741	142.250.186.100	192.168.2.4
Oct 24, 2024 04:47:27.997709990 CEST	49741	443	192.168.2.4	142.250.186.100
Oct 24, 2024 04:47:28.195564032 CEST	49748	443	192.168.2.4	184.28.90.27
Oct 24, 2024 04:47:28.195658922 CEST	443	49748	184.28.90.27	192.168.2.4
Oct 24, 2024 04:47:28.195754051 CEST	49748	443	192.168.2.4	184.28.90.27
Oct 24, 2024 04:47:28.198311090 CEST	49748	443	192.168.2.4	184.28.90.27
Oct 24, 2024 04:47:28.198345900 CEST	443	49748	184.28.90.27	192.168.2.4
Oct 24, 2024 04:47:28.435832977 CEST	443	49746	151.101.2.137	192.168.2.4
Oct 24, 2024 04:47:28.436129093 CEST	49746	443	192.168.2.4	151.101.2.137
Oct 24, 2024 04:47:28.436189890 CEST	443	49746	151.101.2.137	192.168.2.4
Oct 24, 2024 04:47:28.437632084 CEST	443	49746	151.101.2.137	192.168.2.4
Oct 24, 2024 04:47:28.437709093 CEST	49746	443	192.168.2.4	151.101.2.137
Oct 24, 2024 04:47:28.438138008 CEST	49746	443	192.168.2.4	151.101.2.137
Oct 24, 2024 04:47:28.438225985 CEST	443	49746	151.101.2.137	192.168.2.4
Oct 24, 2024 04:47:28.438339949 CEST	49746	443	192.168.2.4	151.101.2.137
Oct 24, 2024 04:47:28.438357115 CEST	443	49746	151.101.2.137	192.168.2.4
Oct 24, 2024 04:47:28.441401958 CEST	443	49742	18.66.122.42	192.168.2.4
Oct 24, 2024 04:47:28.442378998 CEST	49742	443	192.168.2.4	18.66.122.42
Oct 24, 2024 04:47:28.442420006 CEST	443	49742	18.66.122.42	192.168.2.4
Oct 24, 2024 04:47:28.442945004 CEST	443	49742	18.66.122.42	192.168.2.4
Oct 24, 2024 04:47:28.443350077 CEST	49742	443	192.168.2.4	18.66.122.42
Oct 24, 2024 04:47:28.443449020 CEST	443	49742	18.66.122.42	192.168.2.4
Oct 24, 2024 04:47:28.443486929 CEST	49742	443	192.168.2.4	18.66.122.42
Oct 24, 2024 04:47:28.487375021 CEST	443	49742	18.66.122.42	192.168.2.4
Oct 24, 2024 04:47:28.491269112 CEST	49746	443	192.168.2.4	151.101.2.137
Oct 24, 2024 04:47:28.491292953 CEST	49742	443	192.168.2.4	18.66.122.42
Oct 24, 2024 04:47:28.576386929 CEST	443	49746	151.101.2.137	192.168.2.4
Oct 24, 2024 04:47:28.576630116 CEST	443	49746	151.101.2.137	192.168.2.4
Oct 24, 2024 04:47:28.576687098 CEST	49746	443	192.168.2.4	151.101.2.137
Oct 24, 2024 04:47:28.576709032 CEST	443	49746	151.101.2.137	192.168.2.4
Oct 24, 2024 04:47:28.576802015 CEST	443	49746	151.101.2.137	192.168.2.4
Oct 24, 2024 04:47:28.576870918 CEST	49746	443	192.168.2.4	151.101.2.137
Oct 24, 2024 04:47:28.576886892 CEST	443	49746	151.101.2.137	192.168.2.4
Oct 24, 2024 04:47:28.577073097 CEST	443	49746	151.101.2.137	192.168.2.4
Oct 24, 2024 04:47:28.577157974 CEST	49746	443	192.168.2.4	151.101.2.137
Oct 24, 2024 04:47:28.577159882 CEST	443	49746	151.101.2.137	192.168.2.4
Oct 24, 2024 04:47:28.577188969 CEST	443	49746	151.101.2.137	192.168.2.4
Oct 24, 2024 04:47:28.577272892 CEST	49746	443	192.168.2.4	151.101.2.137
Oct 24, 2024 04:47:28.577286005 CEST	443	49746	151.101.2.137	192.168.2.4
Oct 24, 2024 04:47:28.631472111 CEST	443	49747	208.91.114.103	192.168.2.4
Oct 24, 2024 04:47:28.631731987 CEST	49746	443	192.168.2.4	151.101.2.137
Oct 24, 2024 04:47:28.631746054 CEST	443	49746	151.101.2.137	192.168.2.4
Oct 24, 2024 04:47:28.632033110 CEST	49747	443	192.168.2.4	208.91.114.103
Oct 24, 2024 04:47:28.632039070 CEST	443	49747	208.91.114.103	192.168.2.4
Oct 24, 2024 04:47:28.633676052 CEST	443	49747	208.91.114.103	192.168.2.4
Oct 24, 2024 04:47:28.633752108 CEST	49747	443	192.168.2.4	208.91.114.103
Oct 24, 2024 04:47:28.634648085 CEST	49747	443	192.168.2.4	208.91.114.103
Oct 24, 2024 04:47:28.634730101 CEST	443	49747	208.91.114.103	192.168.2.4
Oct 24, 2024 04:47:28.634897947 CEST	49747	443	192.168.2.4	208.91.114.103
Oct 24, 2024 04:47:28.634903908 CEST	443	49747	208.91.114.103	192.168.2.4
Oct 24, 2024 04:47:28.677438974 CEST	49746	443	192.168.2.4	151.101.2.137
Oct 24, 2024 04:47:28.677440882 CEST	49747	443	192.168.2.4	208.91.114.103
Oct 24, 2024 04:47:28.695923090 CEST	443	49746	151.101.2.137	192.168.2.4
Oct 24, 2024 04:47:28.696084023 CEST	443	49746	151.101.2.137	192.168.2.4
Oct 24, 2024 04:47:28.696146011 CEST	49746	443	192.168.2.4	151.101.2.137
Oct 24, 2024 04:47:28.696154118 CEST	443	49746	151.101.2.137	192.168.2.4
Oct 24, 2024 04:47:28.744066000 CEST	49746	443	192.168.2.4	151.101.2.137
Oct 24, 2024 04:47:28.816427946 CEST	443	49746	151.101.2.137	192.168.2.4
Oct 24, 2024 04:47:28.816450119 CEST	443	49746	151.101.2.137	192.168.2.4
Oct 24, 2024 04:47:28.816466093 CEST	443	49746	151.101.2.137	192.168.2.4
Oct 24, 2024 04:47:28.816504002 CEST	49746	443	192.168.2.4	151.101.2.137
Oct 24, 2024 04:47:28.816505909 CEST	443	49746	151.101.2.137	192.168.2.4
Oct 24, 2024 04:47:28.816525936 CEST	443	49746	151.101.2.137	192.168.2.4
Oct 24, 2024 04:47:28.816541910 CEST	49746	443	192.168.2.4	151.101.2.137
Oct 24, 2024 04:47:28.816555023 CEST	443	49746	151.101.2.137	192.168.2.4
Oct 24, 2024 04:47:28.816560030 CEST	49746	443	192.168.2.4	151.101.2.137
Oct 24, 2024 04:47:28.816581011 CEST	49746	443	192.168.2.4	151.101.2.137
Oct 24, 2024 04:47:28.816582918 CEST	443	49746	151.101.2.137	192.168.2.4
Oct 24, 2024 04:47:28.816648960 CEST	49746	443	192.168.2.4	151.101.2.137
Oct 24, 2024 04:47:28.817950964 CEST	443	49747	208.91.114.103	192.168.2.4
Oct 24, 2024 04:47:28.818423986 CEST	443	49747	208.91.114.103	192.168.2.4
Oct 24, 2024 04:47:28.818494081 CEST	49747	443	192.168.2.4	208.91.114.103
Oct 24, 2024 04:47:28.818507910 CEST	443	49747	208.91.114.103	192.168.2.4
Oct 24, 2024 04:47:28.818548918 CEST	49747	443	192.168.2.4	208.91.114.103
Oct 24, 2024 04:47:28.818592072 CEST	443	49747	208.91.114.103	192.168.2.4
Oct 24, 2024 04:47:28.818640947 CEST	49747	443	192.168.2.4	208.91.114.103
Oct 24, 2024 04:47:28.820029020 CEST	49747	443	192.168.2.4	208.91.114.103
Oct 24, 2024 04:47:28.820044041 CEST	443	49747	208.91.114.103	192.168.2.4
Oct 24, 2024 04:47:28.855865002 CEST	443	49742	18.66.122.42	192.168.2.4
Oct 24, 2024 04:47:28.855950117 CEST	443	49742	18.66.122.42	192.168.2.4
Oct 24, 2024 04:47:28.856014013 CEST	49742	443	192.168.2.4	18.66.122.42
Oct 24, 2024 04:47:28.856512070 CEST	49742	443	192.168.2.4	18.66.122.42
Oct 24, 2024 04:47:28.856551886 CEST	443	49742	18.66.122.42	192.168.2.4
Oct 24, 2024 04:47:28.946410894 CEST	443	49746	151.101.2.137	192.168.2.4
Oct 24, 2024 04:47:28.946438074 CEST	443	49746	151.101.2.137	192.168.2.4
Oct 24, 2024 04:47:28.946480989 CEST	443	49746	151.101.2.137	192.168.2.4
Oct 24, 2024 04:47:28.946486950 CEST	49746	443	192.168.2.4	151.101.2.137
Oct 24, 2024 04:47:28.946533918 CEST	49746	443	192.168.2.4	151.101.2.137
Oct 24, 2024 04:47:28.946533918 CEST	49746	443	192.168.2.4	151.101.2.137
Oct 24, 2024 04:47:28.946537018 CEST	443	49746	151.101.2.137	192.168.2.4
Oct 24, 2024 04:47:28.946569920 CEST	443	49746	151.101.2.137	192.168.2.4
Oct 24, 2024 04:47:28.946645021 CEST	49746	443	192.168.2.4	151.101.2.137
Oct 24, 2024 04:47:29.056169987 CEST	443	49746	151.101.2.137	192.168.2.4
Oct 24, 2024 04:47:29.056216002 CEST	443	49746	151.101.2.137	192.168.2.4
Oct 24, 2024 04:47:29.056252003 CEST	49746	443	192.168.2.4	151.101.2.137
Oct 24, 2024 04:47:29.056274891 CEST	443	49746	151.101.2.137	192.168.2.4
Oct 24, 2024 04:47:29.056302071 CEST	49746	443	192.168.2.4	151.101.2.137
Oct 24, 2024 04:47:29.056320906 CEST	49746	443	192.168.2.4	151.101.2.137
Oct 24, 2024 04:47:29.176050901 CEST	443	49746	151.101.2.137	192.168.2.4
Oct 24, 2024 04:47:29.176100016 CEST	443	49746	151.101.2.137	192.168.2.4
Oct 24, 2024 04:47:29.176160097 CEST	49746	443	192.168.2.4	151.101.2.137
Oct 24, 2024 04:47:29.176223993 CEST	443	49746	151.101.2.137	192.168.2.4
Oct 24, 2024 04:47:29.176259995 CEST	443	49746	151.101.2.137	192.168.2.4
Oct 24, 2024 04:47:29.176278114 CEST	49746	443	192.168.2.4	151.101.2.137
Oct 24, 2024 04:47:29.176278114 CEST	49746	443	192.168.2.4	151.101.2.137
Oct 24, 2024 04:47:29.176301956 CEST	443	49746	151.101.2.137	192.168.2.4
Oct 24, 2024 04:47:29.176330090 CEST	49746	443	192.168.2.4	151.101.2.137
Oct 24, 2024 04:47:29.176448107 CEST	443	49746	151.101.2.137	192.168.2.4
Oct 24, 2024 04:47:29.176700115 CEST	49746	443	192.168.2.4	151.101.2.137
Oct 24, 2024 04:47:29.178021908 CEST	49746	443	192.168.2.4	151.101.2.137
Oct 24, 2024 04:47:29.178050995 CEST	443	49746	151.101.2.137	192.168.2.4
Oct 24, 2024 04:47:29.431365967 CEST	443	49748	184.28.90.27	192.168.2.4
Oct 24, 2024 04:47:29.431482077 CEST	49748	443	192.168.2.4	184.28.90.27
Oct 24, 2024 04:47:29.540467978 CEST	49748	443	192.168.2.4	184.28.90.27
Oct 24, 2024 04:47:29.540510893 CEST	443	49748	184.28.90.27	192.168.2.4
Oct 24, 2024 04:47:29.540791035 CEST	443	49748	184.28.90.27	192.168.2.4
Oct 24, 2024 04:47:29.589433908 CEST	49748	443	192.168.2.4	184.28.90.27
Oct 24, 2024 04:47:29.609894991 CEST	49748	443	192.168.2.4	184.28.90.27
Oct 24, 2024 04:47:29.651374102 CEST	443	49748	184.28.90.27	192.168.2.4
Oct 24, 2024 04:47:29.728784084 CEST	49749	443	192.168.2.4	142.250.186.36
Oct 24, 2024 04:47:29.728812933 CEST	443	49749	142.250.186.36	192.168.2.4
Oct 24, 2024 04:47:29.729134083 CEST	49749	443	192.168.2.4	142.250.186.36
Oct 24, 2024 04:47:29.729341984 CEST	49749	443	192.168.2.4	142.250.186.36
Oct 24, 2024 04:47:29.729360104 CEST	443	49749	142.250.186.36	192.168.2.4
Oct 24, 2024 04:47:29.854841948 CEST	443	49748	184.28.90.27	192.168.2.4
Oct 24, 2024 04:47:29.854897022 CEST	443	49748	184.28.90.27	192.168.2.4
Oct 24, 2024 04:47:29.855016947 CEST	49748	443	192.168.2.4	184.28.90.27
Oct 24, 2024 04:47:29.855062008 CEST	443	49748	184.28.90.27	192.168.2.4
Oct 24, 2024 04:47:29.855082989 CEST	49748	443	192.168.2.4	184.28.90.27
Oct 24, 2024 04:47:29.855082989 CEST	49748	443	192.168.2.4	184.28.90.27
Oct 24, 2024 04:47:29.855093956 CEST	443	49748	184.28.90.27	192.168.2.4
Oct 24, 2024 04:47:29.855103016 CEST	443	49748	184.28.90.27	192.168.2.4
Oct 24, 2024 04:47:29.894572020 CEST	49751	443	192.168.2.4	184.28.90.27
Oct 24, 2024 04:47:29.894669056 CEST	443	49751	184.28.90.27	192.168.2.4
Oct 24, 2024 04:47:29.894748926 CEST	49751	443	192.168.2.4	184.28.90.27
Oct 24, 2024 04:47:29.895001888 CEST	49751	443	192.168.2.4	184.28.90.27
Oct 24, 2024 04:47:29.895035982 CEST	443	49751	184.28.90.27	192.168.2.4
Oct 24, 2024 04:47:30.314903975 CEST	49752	443	192.168.2.4	210.207.246.253
Oct 24, 2024 04:47:30.314991951 CEST	443	49752	210.207.246.253	192.168.2.4
Oct 24, 2024 04:47:30.315166950 CEST	49752	443	192.168.2.4	210.207.246.253
Oct 24, 2024 04:47:30.315247059 CEST	49752	443	192.168.2.4	210.207.246.253
Oct 24, 2024 04:47:30.315263987 CEST	443	49752	210.207.246.253	192.168.2.4
Oct 24, 2024 04:47:30.584258080 CEST	443	49749	142.250.186.36	192.168.2.4
Oct 24, 2024 04:47:30.585891962 CEST	49749	443	192.168.2.4	142.250.186.36
Oct 24, 2024 04:47:30.585908890 CEST	443	49749	142.250.186.36	192.168.2.4
Oct 24, 2024 04:47:30.587353945 CEST	443	49749	142.250.186.36	192.168.2.4
Oct 24, 2024 04:47:30.587413073 CEST	49749	443	192.168.2.4	142.250.186.36
Oct 24, 2024 04:47:30.587721109 CEST	49749	443	192.168.2.4	142.250.186.36
Oct 24, 2024 04:47:30.587800026 CEST	443	49749	142.250.186.36	192.168.2.4
Oct 24, 2024 04:47:30.587884903 CEST	49749	443	192.168.2.4	142.250.186.36
Oct 24, 2024 04:47:30.587892056 CEST	443	49749	142.250.186.36	192.168.2.4
Oct 24, 2024 04:47:30.638995886 CEST	49749	443	192.168.2.4	142.250.186.36
Oct 24, 2024 04:47:30.749500990 CEST	443	49751	184.28.90.27	192.168.2.4
Oct 24, 2024 04:47:30.749857903 CEST	49751	443	192.168.2.4	184.28.90.27
Oct 24, 2024 04:47:30.751261950 CEST	49751	443	192.168.2.4	184.28.90.27
Oct 24, 2024 04:47:30.751317978 CEST	443	49751	184.28.90.27	192.168.2.4
Oct 24, 2024 04:47:30.752263069 CEST	443	49751	184.28.90.27	192.168.2.4
Oct 24, 2024 04:47:30.753391981 CEST	49751	443	192.168.2.4	184.28.90.27
Oct 24, 2024 04:47:30.799336910 CEST	443	49751	184.28.90.27	192.168.2.4
Oct 24, 2024 04:47:30.840411901 CEST	443	49749	142.250.186.36	192.168.2.4
Oct 24, 2024 04:47:30.840861082 CEST	49749	443	192.168.2.4	142.250.186.36
Oct 24, 2024 04:47:30.840893984 CEST	443	49749	142.250.186.36	192.168.2.4
Oct 24, 2024 04:47:30.840954065 CEST	49749	443	192.168.2.4	142.250.186.36
Oct 24, 2024 04:47:30.999874115 CEST	443	49751	184.28.90.27	192.168.2.4
Oct 24, 2024 04:47:31.000190020 CEST	443	49751	184.28.90.27	192.168.2.4
Oct 24, 2024 04:47:31.000828981 CEST	49751	443	192.168.2.4	184.28.90.27
Oct 24, 2024 04:47:31.000915051 CEST	49751	443	192.168.2.4	184.28.90.27
Oct 24, 2024 04:47:31.000916004 CEST	49751	443	192.168.2.4	184.28.90.27
Oct 24, 2024 04:47:31.000962973 CEST	443	49751	184.28.90.27	192.168.2.4
Oct 24, 2024 04:47:31.000991106 CEST	443	49751	184.28.90.27	192.168.2.4
Oct 24, 2024 04:47:31.213027954 CEST	80	49735	92.205.4.171	192.168.2.4
Oct 24, 2024 04:47:31.213118076 CEST	49735	80	192.168.2.4	92.205.4.171
Oct 24, 2024 04:47:31.242578983 CEST	49735	80	192.168.2.4	92.205.4.171
Oct 24, 2024 04:47:31.247917891 CEST	80	49735	92.205.4.171	192.168.2.4
Oct 24, 2024 04:47:35.849932909 CEST	49754	443	192.168.2.4	4.245.163.56
Oct 24, 2024 04:47:35.849970102 CEST	443	49754	4.245.163.56	192.168.2.4
Oct 24, 2024 04:47:35.850071907 CEST	49754	443	192.168.2.4	4.245.163.56
Oct 24, 2024 04:47:35.851454020 CEST	49754	443	192.168.2.4	4.245.163.56
Oct 24, 2024 04:47:35.851465940 CEST	443	49754	4.245.163.56	192.168.2.4
Oct 24, 2024 04:47:36.964997053 CEST	443	49754	4.245.163.56	192.168.2.4
Oct 24, 2024 04:47:36.965115070 CEST	49754	443	192.168.2.4	4.245.163.56
Oct 24, 2024 04:47:37.039582968 CEST	49754	443	192.168.2.4	4.245.163.56
Oct 24, 2024 04:47:37.039606094 CEST	443	49754	4.245.163.56	192.168.2.4
Oct 24, 2024 04:47:37.040544033 CEST	443	49754	4.245.163.56	192.168.2.4
Oct 24, 2024 04:47:37.081444979 CEST	49754	443	192.168.2.4	4.245.163.56
Oct 24, 2024 04:47:37.924973965 CEST	443	49741	142.250.186.100	192.168.2.4
Oct 24, 2024 04:47:37.925065994 CEST	443	49741	142.250.186.100	192.168.2.4
Oct 24, 2024 04:47:37.925137997 CEST	49741	443	192.168.2.4	142.250.186.100
Oct 24, 2024 04:47:38.043545961 CEST	49754	443	192.168.2.4	4.245.163.56
Oct 24, 2024 04:47:38.057110071 CEST	49723	80	192.168.2.4	2.16.100.168
Oct 24, 2024 04:47:38.063225031 CEST	80	49723	2.16.100.168	192.168.2.4
Oct 24, 2024 04:47:38.063308001 CEST	49723	80	192.168.2.4	2.16.100.168
Oct 24, 2024 04:47:38.087362051 CEST	443	49754	4.245.163.56	192.168.2.4
Oct 24, 2024 04:47:38.406073093 CEST	443	49754	4.245.163.56	192.168.2.4
Oct 24, 2024 04:47:38.406136036 CEST	443	49754	4.245.163.56	192.168.2.4
Oct 24, 2024 04:47:38.406156063 CEST	443	49754	4.245.163.56	192.168.2.4
Oct 24, 2024 04:47:38.406196117 CEST	443	49754	4.245.163.56	192.168.2.4
Oct 24, 2024 04:47:38.406194925 CEST	49754	443	192.168.2.4	4.245.163.56
Oct 24, 2024 04:47:38.406220913 CEST	49754	443	192.168.2.4	4.245.163.56
Oct 24, 2024 04:47:38.406227112 CEST	443	49754	4.245.163.56	192.168.2.4
Oct 24, 2024 04:47:38.406243086 CEST	443	49754	4.245.163.56	192.168.2.4
Oct 24, 2024 04:47:38.406245947 CEST	49754	443	192.168.2.4	4.245.163.56
Oct 24, 2024 04:47:38.406294107 CEST	49754	443	192.168.2.4	4.245.163.56
Oct 24, 2024 04:47:38.406918049 CEST	443	49754	4.245.163.56	192.168.2.4
Oct 24, 2024 04:47:38.406992912 CEST	49754	443	192.168.2.4	4.245.163.56
Oct 24, 2024 04:47:38.407001972 CEST	443	49754	4.245.163.56	192.168.2.4
Oct 24, 2024 04:47:38.458739996 CEST	49754	443	192.168.2.4	4.245.163.56
Oct 24, 2024 04:47:38.520272017 CEST	443	49754	4.245.163.56	192.168.2.4
Oct 24, 2024 04:47:38.520400047 CEST	443	49754	4.245.163.56	192.168.2.4
Oct 24, 2024 04:47:38.520461082 CEST	49754	443	192.168.2.4	4.245.163.56
Oct 24, 2024 04:47:39.245517015 CEST	49754	443	192.168.2.4	4.245.163.56
Oct 24, 2024 04:47:39.245537043 CEST	443	49754	4.245.163.56	192.168.2.4
Oct 24, 2024 04:47:39.803402901 CEST	49741	443	192.168.2.4	142.250.186.100
Oct 24, 2024 04:47:39.803463936 CEST	443	49741	142.250.186.100	192.168.2.4
Oct 24, 2024 04:47:47.297888994 CEST	443	49752	210.207.246.253	192.168.2.4
Oct 24, 2024 04:47:47.297992945 CEST	49752	443	192.168.2.4	210.207.246.253
Oct 24, 2024 04:47:47.298535109 CEST	49752	443	192.168.2.4	210.207.246.253
Oct 24, 2024 04:47:47.298587084 CEST	443	49752	210.207.246.253	192.168.2.4
Oct 24, 2024 04:47:47.299679041 CEST	49760	443	192.168.2.4	210.207.246.253
Oct 24, 2024 04:47:47.299773932 CEST	443	49760	210.207.246.253	192.168.2.4
Oct 24, 2024 04:47:47.299896002 CEST	49760	443	192.168.2.4	210.207.246.253
Oct 24, 2024 04:47:47.338689089 CEST	49760	443	192.168.2.4	210.207.246.253
Oct 24, 2024 04:47:47.338742018 CEST	443	49760	210.207.246.253	192.168.2.4
Oct 24, 2024 04:48:04.317060947 CEST	443	49760	210.207.246.253	192.168.2.4
Oct 24, 2024 04:48:04.317347050 CEST	49760	443	192.168.2.4	210.207.246.253
Oct 24, 2024 04:48:04.318116903 CEST	49760	443	192.168.2.4	210.207.246.253
Oct 24, 2024 04:48:04.318137884 CEST	443	49760	210.207.246.253	192.168.2.4
Oct 24, 2024 04:48:10.261919022 CEST	49736	80	192.168.2.4	92.205.4.171
Oct 24, 2024 04:48:10.267796993 CEST	80	49736	92.205.4.171	192.168.2.4
Oct 24, 2024 04:48:12.932792902 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:12.932843924 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:12.933278084 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:12.933278084 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:12.933326006 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:13.671263933 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:13.671365976 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:13.675004959 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:13.675038099 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:13.675384998 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:13.684524059 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:13.731343985 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:13.925600052 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:13.925657034 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:13.925767899 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:13.925822973 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:13.925889969 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:13.925905943 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:13.925940037 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:14.041213036 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:14.041261911 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:14.041294098 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:14.041306019 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:14.041336060 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:14.041346073 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:14.157215118 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:14.157260895 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:14.157315016 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:14.157346964 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:14.157371998 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:14.157398939 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:14.273128986 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:14.273175955 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:14.273214102 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:14.273235083 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:14.273266077 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:14.273286104 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:14.389262915 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:14.389305115 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:14.389353991 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:14.389369965 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:14.389411926 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:14.389436960 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:14.505219936 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:14.505286932 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:14.505342960 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:14.505369902 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:14.505403996 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:14.505425930 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:14.621037006 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:14.621082067 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:14.621129036 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:14.621138096 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:14.621179104 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:14.621205091 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:14.736581087 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:14.736622095 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:14.736790895 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:14.736790895 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:14.736824036 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:14.736891031 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:14.852407932 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:14.852452040 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:14.852650881 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:14.852652073 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:14.852720976 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:14.852797985 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:14.893793106 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:14.893835068 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:14.894004107 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:14.894004107 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:14.894068003 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:14.894294024 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:15.009984970 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:15.010029078 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:15.010207891 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:15.010207891 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:15.010272980 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:15.010366917 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:15.084537983 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:15.084579945 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:15.084750891 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:15.084750891 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:15.084815025 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:15.084942102 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:15.200653076 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:15.200717926 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:15.200826883 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:15.200889111 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:15.200890064 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:15.200953007 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:15.200994015 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:15.200998068 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:15.201072931 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:15.201149940 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:15.201149940 CEST	49762	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:15.201184988 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:15.201206923 CEST	443	49762	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:15.249150038 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:15.249249935 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:15.249296904 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:15.249346018 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:15.249392033 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:15.249458075 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:15.250793934 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:15.250823021 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:15.250986099 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:15.250993967 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:15.251029968 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:15.251468897 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:15.251481056 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:15.252413988 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:15.252427101 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:15.254354000 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:15.254362106 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:15.254407883 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:15.254415035 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:15.255804062 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:15.255830050 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:15.255976915 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:15.255978107 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:15.255990028 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:15.255990028 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:15.617563009 CEST	49768	443	192.168.2.4	4.245.163.56
Oct 24, 2024 04:48:15.617594957 CEST	443	49768	4.245.163.56	192.168.2.4
Oct 24, 2024 04:48:15.617877960 CEST	49768	443	192.168.2.4	4.245.163.56
Oct 24, 2024 04:48:15.620508909 CEST	49768	443	192.168.2.4	4.245.163.56
Oct 24, 2024 04:48:15.620520115 CEST	443	49768	4.245.163.56	192.168.2.4
Oct 24, 2024 04:48:15.976150990 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:15.977235079 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:15.977247953 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:15.980676889 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:15.980680943 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:15.981328964 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:15.982547045 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:15.982604980 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:15.983253956 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:15.983266115 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:15.990068913 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:15.990658998 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:15.990672112 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:15.992178917 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:15.992182970 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:16.000344038 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:16.000777960 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:16.000783920 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:16.003912926 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:16.003916979 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:16.105457067 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:16.105683088 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:16.106286049 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:16.106566906 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:16.106578112 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:16.106648922 CEST	49764	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:16.106652975 CEST	443	49764	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:16.117312908 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:16.117341995 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:16.117418051 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:16.117460966 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:16.117597103 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:16.120760918 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:16.120814085 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:16.121151924 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:16.121481895 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:16.135997057 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:16.136301994 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:16.136533976 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:16.404294968 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:16.404340029 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:16.404352903 CEST	49765	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:16.404360056 CEST	443	49765	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:16.416657925 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:16.416682005 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:16.416692972 CEST	49766	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:16.416697025 CEST	443	49766	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:16.437493086 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:16.437544107 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:16.437572002 CEST	49763	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:16.437587976 CEST	443	49763	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:16.493463993 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:16.497231960 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:16.497314930 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:16.497477055 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:16.510688066 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:16.510690928 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:16.510710955 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:16.510725021 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:16.510786057 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:16.510886908 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:16.519155025 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:16.519241095 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:16.519335032 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:16.519357920 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:16.519376040 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:16.523473024 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:16.523482084 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:16.527908087 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:16.527913094 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:16.528068066 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:16.528136969 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:16.528143883 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:16.528204918 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:16.528228998 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:16.528254032 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:16.654558897 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:16.654580116 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:16.654629946 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:16.654648066 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:16.654717922 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:16.654855013 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:16.657917023 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:16.657931089 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:16.657941103 CEST	49767	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:16.657944918 CEST	443	49767	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:16.665033102 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:16.665127039 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:16.665199041 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:16.665735006 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:16.665766001 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:16.741269112 CEST	443	49768	4.245.163.56	192.168.2.4
Oct 24, 2024 04:48:16.741347075 CEST	49768	443	192.168.2.4	4.245.163.56
Oct 24, 2024 04:48:16.745816946 CEST	49768	443	192.168.2.4	4.245.163.56
Oct 24, 2024 04:48:16.745820999 CEST	443	49768	4.245.163.56	192.168.2.4
Oct 24, 2024 04:48:16.746138096 CEST	443	49768	4.245.163.56	192.168.2.4
Oct 24, 2024 04:48:16.765830994 CEST	49768	443	192.168.2.4	4.245.163.56
Oct 24, 2024 04:48:16.807406902 CEST	443	49768	4.245.163.56	192.168.2.4
Oct 24, 2024 04:48:17.127613068 CEST	443	49768	4.245.163.56	192.168.2.4
Oct 24, 2024 04:48:17.127670050 CEST	443	49768	4.245.163.56	192.168.2.4
Oct 24, 2024 04:48:17.127712011 CEST	443	49768	4.245.163.56	192.168.2.4
Oct 24, 2024 04:48:17.127748013 CEST	49768	443	192.168.2.4	4.245.163.56
Oct 24, 2024 04:48:17.127767086 CEST	443	49768	4.245.163.56	192.168.2.4
Oct 24, 2024 04:48:17.127782106 CEST	49768	443	192.168.2.4	4.245.163.56
Oct 24, 2024 04:48:17.127813101 CEST	49768	443	192.168.2.4	4.245.163.56
Oct 24, 2024 04:48:17.246393919 CEST	443	49768	4.245.163.56	192.168.2.4
Oct 24, 2024 04:48:17.246488094 CEST	49768	443	192.168.2.4	4.245.163.56
Oct 24, 2024 04:48:17.246489048 CEST	443	49768	4.245.163.56	192.168.2.4
Oct 24, 2024 04:48:17.246521950 CEST	443	49768	4.245.163.56	192.168.2.4
Oct 24, 2024 04:48:17.246553898 CEST	49768	443	192.168.2.4	4.245.163.56
Oct 24, 2024 04:48:17.246635914 CEST	443	49768	4.245.163.56	192.168.2.4
Oct 24, 2024 04:48:17.246694088 CEST	49768	443	192.168.2.4	4.245.163.56
Oct 24, 2024 04:48:17.246985912 CEST	49768	443	192.168.2.4	4.245.163.56
Oct 24, 2024 04:48:17.246998072 CEST	443	49768	4.245.163.56	192.168.2.4
Oct 24, 2024 04:48:17.263972998 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:17.264431000 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:17.264441967 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:17.264930964 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:17.264935017 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:17.269345999 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:17.269696951 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:17.269721031 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:17.270219088 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:17.270226002 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:17.272166014 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:17.272485971 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:17.272495031 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:17.272833109 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:17.272839069 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:17.275084019 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:17.275428057 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:17.275486946 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:17.275830984 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:17.275846004 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:17.385418892 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:17.385751009 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:17.385826111 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:17.386280060 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:17.386295080 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:17.393662930 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:17.394022942 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:17.394076109 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:17.394149065 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:17.394171000 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:17.394184113 CEST	49770	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:17.394196033 CEST	443	49770	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:17.400250912 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:17.400312901 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:17.400381088 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:17.401274920 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:17.401305914 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:17.401972055 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:17.402311087 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:17.402383089 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:17.402518988 CEST	49771	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:17.402549982 CEST	443	49771	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:17.405518055 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:17.405718088 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:17.405769110 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:17.405936956 CEST	49769	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:17.405960083 CEST	443	49769	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:17.408512115 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:17.408653975 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:17.408726931 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:17.411485910 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:17.411569118 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:17.411649942 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:17.412070036 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:17.412090063 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:17.412121058 CEST	49772	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:17.412132978 CEST	443	49772	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:17.412731886 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:17.412781000 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:17.416052103 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:17.416101933 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:17.416187048 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:17.416359901 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:17.416388988 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:17.429348946 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:17.429366112 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:17.429413080 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:17.433325052 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:17.433337927 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:17.514821053 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:17.515024900 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:17.515091896 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:17.515281916 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:17.515281916 CEST	49773	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:17.515310049 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:17.515351057 CEST	443	49773	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:17.519231081 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:17.519267082 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:17.519361019 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:17.519565105 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:17.519577980 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:18.148226976 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:18.148952007 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:18.149025917 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:18.149646997 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:18.149662971 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:18.153297901 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:18.154015064 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:18.154089928 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:18.155080080 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:18.155092955 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:18.166654110 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:18.167016983 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:18.167041063 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:18.167589903 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:18.167603016 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:18.170538902 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:18.171331882 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:18.171372890 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:18.172132969 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:18.172147036 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:18.271127939 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:18.271718025 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:18.271769047 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:18.272176981 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:18.272187948 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:18.278330088 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:18.278966904 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:18.279501915 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:18.279503107 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:18.279503107 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:18.281776905 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:18.281805992 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:18.281953096 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:18.282082081 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:18.282085896 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:18.282737017 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:18.282877922 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:18.283026934 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:18.283104897 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:18.283104897 CEST	49774	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:18.283160925 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:18.283186913 CEST	443	49774	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:18.285096884 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:18.285166979 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:18.285294056 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:18.289825916 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:18.289858103 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:18.295516014 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:18.295648098 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:18.295752048 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:18.295752048 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:18.295752048 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:18.297509909 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:18.297566891 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:18.297657967 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:18.297739029 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:18.297763109 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:18.302356005 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:18.302566051 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:18.302671909 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:18.302671909 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:18.302738905 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:18.302767992 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:18.304337978 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:18.304361105 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:18.304523945 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:18.304523945 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:18.304569960 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:18.404190063 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:18.404536963 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:18.404644012 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:18.404644012 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:18.404644012 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:18.406357050 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:18.406388044 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:18.406583071 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:18.406583071 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:18.406630993 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:18.583838940 CEST	49775	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:18.583899975 CEST	443	49775	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:18.599127054 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:18.599143028 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:18.708535910 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:18.708570957 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:19.025964022 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:19.026904106 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:19.026963949 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:19.029828072 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:19.029841900 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:19.034543037 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:19.036149025 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:19.036206007 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:19.036675930 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:19.036688089 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:19.077613115 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:19.078175068 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:19.078232050 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:19.078886986 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:19.078900099 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:19.136038065 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:19.137190104 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:19.137223959 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:19.137831926 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:19.137849092 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:19.157864094 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:19.158081055 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:19.161942005 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:19.162103891 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:19.162103891 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:19.162149906 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:19.162178040 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:19.168478966 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:19.168569088 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:19.168668032 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:19.168982983 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:19.169018984 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:19.173907995 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:19.174060106 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:19.174124956 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:19.174268007 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:19.174294949 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:19.174312115 CEST	49781	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:19.174323082 CEST	443	49781	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:19.180107117 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:19.180188894 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:19.180289030 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:19.180541992 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:19.180582047 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:19.207607031 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:19.207742929 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:19.207807064 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:19.207907915 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:19.207931995 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:19.207957983 CEST	49782	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:19.207972050 CEST	443	49782	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:19.216248989 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:19.216330051 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:19.216425896 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:19.216749907 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:19.216784954 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:19.267607927 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:19.268325090 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:19.268393040 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:19.278131962 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:19.278167009 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:19.278214931 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:19.278228998 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:19.326826096 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:19.326925993 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:19.327025890 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:19.353991985 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:19.354072094 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:19.912787914 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:19.913336039 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:19.913367987 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:19.914127111 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:19.914134026 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:19.924693108 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:19.925329924 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:19.925410986 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:19.925734997 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:19.925749063 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:19.966794968 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:19.967242002 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:19.967300892 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:19.967827082 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:19.967839956 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.041630983 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.041774035 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.041866064 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:20.042042017 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:20.042082071 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.042094946 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:20.042103052 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.045608997 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:20.045648098 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.045736074 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:20.045931101 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:20.045936108 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.060672998 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.061398029 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.061604977 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:20.061604977 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:20.061604977 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:20.064238071 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:20.064265013 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.064323902 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:20.064538002 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:20.064548016 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.092920065 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.093358994 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:20.093370914 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.094065905 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:20.094072104 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.098578930 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.098737955 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.098932028 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:20.098932981 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:20.099010944 CEST	49786	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:20.099046946 CEST	443	49786	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.101896048 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:20.101907969 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.102000952 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:20.102139950 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:20.102149963 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.225624084 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.225873947 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.225970030 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:20.226027012 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:20.226036072 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.226066113 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:20.226070881 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.228534937 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:20.228557110 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.228712082 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:20.228847980 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:20.228857994 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.364748001 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:20.364808083 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.788271904 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.789115906 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:20.789132118 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.789904118 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:20.789907932 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.818449020 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.818919897 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:20.818938017 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.819274902 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:20.819279909 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.839862108 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.840177059 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:20.840183020 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.840519905 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:20.840523958 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.849124908 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.849531889 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:20.849551916 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.849885941 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:20.849895000 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.948199034 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.948340893 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.948519945 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:20.948551893 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:20.948558092 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.948581934 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:20.948585987 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.950278997 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.950442076 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.950500011 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:20.950577974 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:20.950587034 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.950614929 CEST	49789	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:20.950618982 CEST	443	49789	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.951735020 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:20.951816082 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.951910973 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:20.952043056 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:20.952068090 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.953282118 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:20.953367949 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.953461885 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:20.953644991 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:20.953685045 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.956931114 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.957346916 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:20.957359076 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.957670927 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:20.957674980 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.969235897 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.969377041 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.969434023 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:20.969553947 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:20.969558954 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.969567060 CEST	49790	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:20.969569921 CEST	443	49790	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.972105026 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:20.972184896 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:20.972284079 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:20.972392082 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:20.972426891 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:21.087155104 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:21.087376118 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:21.087483883 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:21.087551117 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:21.087562084 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:21.087572098 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:21.087577105 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:21.090529919 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:21.090619087 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:21.090908051 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:21.091100931 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:21.091140032 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:21.191740036 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:21.191890001 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:21.191956043 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:21.192069054 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:21.192090034 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:21.192105055 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:21.192112923 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:21.194498062 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:21.194509983 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:21.194582939 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:21.194684029 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:21.194689989 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:21.682260036 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:21.682799101 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:21.682832956 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:21.683604956 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:21.683656931 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:21.693418026 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:21.693830013 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:21.693886995 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:21.694155931 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:21.694169998 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:21.718383074 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:21.718966961 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:21.718998909 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:21.719780922 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:21.719793081 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:21.810832024 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:21.811295033 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:21.811480045 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:21.811480999 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:21.811480999 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:21.814217091 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:21.814240932 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:21.814311981 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:21.814486027 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:21.814496994 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:21.829241991 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:21.829376936 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:21.829441071 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:21.829607010 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:21.829626083 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:21.829639912 CEST	49792	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:21.829647064 CEST	443	49792	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:21.831727982 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:21.831739902 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:21.831813097 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:21.831895113 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:21.831901073 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:21.841377020 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:21.841732979 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:21.841793060 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:21.842303991 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:21.842319012 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:22.041048050 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:22.041203976 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:22.041882992 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:22.041960001 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:22.041960001 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:22.042002916 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:22.042030096 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:22.043557882 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:22.043570995 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:22.043670893 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:22.043790102 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:22.043797016 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:22.045013905 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:22.045717955 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:22.045725107 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:22.046510935 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:22.046519041 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:22.114711046 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:22.114753008 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:22.166348934 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:22.166439056 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:22.166712999 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:22.166713953 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:22.166804075 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:22.166840076 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:22.169234991 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:22.169316053 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:22.169404984 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:22.169624090 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:22.169658899 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:22.176806927 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:22.176963091 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:22.177031994 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:22.177067995 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:22.177073002 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:22.177145958 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:22.177149057 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:22.179572105 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:22.179604053 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:22.179832935 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:22.179959059 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:22.179972887 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:22.554825068 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:22.555253983 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:22.555270910 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:22.555846930 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:22.555851936 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:22.685682058 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:22.685832024 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:22.685893059 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:22.685950994 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:22.685957909 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:22.685972929 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:22.685976982 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:22.688895941 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:22.688965082 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:22.689054966 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:22.689214945 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:22.689234972 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:22.774995089 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:22.775480032 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:22.775486946 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:22.775916100 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:22.775918961 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:22.797749996 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:22.798079967 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:22.798085928 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:22.798445940 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:22.798449993 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:22.913604021 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:22.913744926 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:22.913815022 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:22.913858891 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:22.913866043 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:22.913873911 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:22.913877010 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:22.915335894 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:22.915690899 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:22.915746927 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:22.916192055 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:22.916204929 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:22.916965961 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:22.917046070 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:22.917273045 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:22.917273045 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:22.917401075 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:22.925071001 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:22.925369978 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:22.925388098 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:22.925893068 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:22.925899029 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:22.932796955 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:22.932997942 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:22.933048964 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:22.933094025 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:22.933094025 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:22.933100939 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:22.933109045 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:22.935450077 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:22.935494900 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:22.935553074 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:22.935664892 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:22.935678959 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:23.046272993 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:23.046453953 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:23.046538115 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:23.046538115 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:23.046628952 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:23.046667099 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:23.048675060 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:23.048755884 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:23.048832893 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:23.048981905 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:23.049012899 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:23.057760000 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:23.057919979 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:23.058082104 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:23.058115959 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:23.058128119 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:23.058136940 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:23.058141947 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:23.060251951 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:23.060338974 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:23.060408115 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:23.060585022 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:23.060637951 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:23.415618896 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:23.433728933 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:23.433788061 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:23.434271097 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:23.434284925 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:23.558785915 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:23.558944941 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:23.559485912 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:23.559663057 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:23.559663057 CEST	49802	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:23.559704065 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:23.559782028 CEST	443	49802	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:23.563860893 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:23.563891888 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:23.564089060 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:23.569856882 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:23.569871902 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:23.655078888 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:23.655797005 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:23.655880928 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:23.656238079 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:23.656251907 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:23.680553913 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:23.684886932 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:23.684947968 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:23.685410976 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:23.685425043 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:23.778064966 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:23.778799057 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:23.778878927 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:23.779524088 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:23.779537916 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:23.783847094 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:23.784049988 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:23.784203053 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:23.784372091 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:23.784372091 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:23.784401894 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:23.784411907 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:23.787708998 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:23.787790060 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:23.787951946 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:23.788254023 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:23.788289070 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:23.793644905 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:23.794423103 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:23.794450998 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:23.797837019 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:23.797849894 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:23.812938929 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:23.813211918 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:23.815931082 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:23.815931082 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:23.816095114 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:23.816128969 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:23.818392038 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:23.818427086 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:23.818559885 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:23.821840048 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:23.821852922 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:23.912693977 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:23.912822008 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:23.913191080 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:23.913191080 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:23.913191080 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:23.917952061 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:23.918032885 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:23.918282032 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:23.918282032 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:23.918365002 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:23.922339916 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:23.922600031 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:23.922872066 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:23.922914982 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:23.922914982 CEST	49807	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:23.922935009 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:23.922954082 CEST	443	49807	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:23.929838896 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:23.929887056 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:23.933011055 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:23.933011055 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:23.933070898 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:24.222656965 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:24.222704887 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:24.304467916 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:24.304847956 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:24.304869890 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:24.305247068 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:24.305253029 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:24.431500912 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:24.431751013 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:24.431802988 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:24.431828976 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:24.431845903 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:24.431857109 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:24.431860924 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:24.433957100 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:24.434051037 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:24.434221983 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:24.434350967 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:24.434365988 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:24.530165911 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:24.530631065 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:24.530689001 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:24.531196117 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:24.531209946 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:24.554748058 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:24.555088997 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:24.555099964 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:24.555452108 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:24.555458069 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:24.648449898 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:24.648744106 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:24.648801088 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:24.649171114 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:24.649183989 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:24.659603119 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:24.659913063 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:24.659953117 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:24.660346985 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:24.660469055 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:24.660482883 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:24.660561085 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:24.660631895 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:24.660681009 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:24.660681009 CEST	49809	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:24.660711050 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:24.660738945 CEST	443	49809	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:24.663183928 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:24.663233995 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:24.663311005 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:24.663456917 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:24.663475037 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:24.685628891 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:24.685784101 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:24.685833931 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:24.685858965 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:24.685869932 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:24.685892105 CEST	49810	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:24.685895920 CEST	443	49810	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:24.687949896 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:24.688030958 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:24.688108921 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:24.688250065 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:24.688283920 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:24.778517962 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:24.778737068 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:24.778924942 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:24.778925896 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:24.778925896 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:24.780543089 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:24.780616045 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:24.780689001 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:24.780807018 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:24.780843973 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:24.786587954 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:24.786740065 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:24.786793947 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:24.786868095 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:24.786906004 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:24.786936045 CEST	49812	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:24.786952019 CEST	443	49812	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:24.788937092 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:24.789014101 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:24.789078951 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:24.789182901 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:24.789210081 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:24.988528967 CEST	49724	80	192.168.2.4	88.221.110.91
Oct 24, 2024 04:48:24.994422913 CEST	80	49724	88.221.110.91	192.168.2.4
Oct 24, 2024 04:48:24.994487047 CEST	49724	80	192.168.2.4	88.221.110.91
Oct 24, 2024 04:48:25.082047939 CEST	49811	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:25.082108021 CEST	443	49811	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:25.187345982 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:25.187978029 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:25.188034058 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:25.188764095 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:25.188776970 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:25.321703911 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:25.321842909 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:25.325937986 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:25.326013088 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:25.326013088 CEST	49813	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:25.326055050 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:25.326088905 CEST	443	49813	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:25.329389095 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:25.329472065 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:25.329669952 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:25.329849005 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:25.329883099 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:25.405213118 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:25.405813932 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:25.405848980 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:25.409846067 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:25.409858942 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:25.427149057 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:25.427741051 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:25.427819967 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:25.428220987 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:25.428237915 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:25.523646116 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:25.524650097 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:25.524719954 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:25.525253057 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:25.525302887 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:25.528577089 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:25.528961897 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:25.529021025 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:25.533858061 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:25.533870935 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:25.536669970 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:25.536886930 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:25.537960052 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:25.538018942 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:25.538019896 CEST	49814	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:25.538053989 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:25.538119078 CEST	443	49814	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:25.545860052 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:25.545938969 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:25.546148062 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:25.549849033 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:25.549885988 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:25.560879946 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:25.561048985 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:25.561428070 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:25.561428070 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:25.561428070 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:25.564295053 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:25.564321041 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:25.564404964 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:25.565834045 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:25.565845966 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:25.652200937 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:25.652405024 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:25.653911114 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:25.653912067 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:25.653990984 CEST	49817	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:25.654026985 CEST	443	49817	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:25.660307884 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:25.660330057 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:25.662803888 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:25.662939072 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:25.662980080 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:25.663105965 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:25.663111925 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:25.663151979 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:25.663331985 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:25.663331985 CEST	49816	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:25.663361073 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:25.663386106 CEST	443	49816	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:25.665894032 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:25.665908098 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:25.666115999 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:25.666115999 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:25.666136026 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:25.861979008 CEST	49815	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:25.862040043 CEST	443	49815	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:26.077183962 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:26.077630997 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:26.077658892 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:26.078064919 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:26.078077078 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:26.120172024 CEST	49736	80	192.168.2.4	92.205.4.171
Oct 24, 2024 04:48:26.126075983 CEST	80	49736	92.205.4.171	192.168.2.4
Oct 24, 2024 04:48:26.126377106 CEST	49736	80	192.168.2.4	92.205.4.171
Oct 24, 2024 04:48:26.208986044 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:26.209122896 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:26.209178925 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:26.209639072 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:26.209671021 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:26.209695101 CEST	49818	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:26.209709883 CEST	443	49818	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:26.214848042 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:26.214905024 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:26.214987993 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:26.215115070 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:26.215136051 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:26.287646055 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:26.288767099 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:26.288822889 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:26.289859056 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:26.289880037 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:26.311017036 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:26.311750889 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:26.311764956 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:26.312262058 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:26.312264919 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:26.386838913 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:26.398443937 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:26.414904118 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:26.414911032 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:26.415541887 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:26.415545940 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:26.417352915 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:26.417846918 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:26.417905092 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:26.419626951 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:26.419626951 CEST	49819	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:26.419660091 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:26.419682026 CEST	443	49819	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:26.440746069 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:26.441133022 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:26.441178083 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:26.441412926 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:26.442327976 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:26.442327976 CEST	49820	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:26.442337036 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:26.442344904 CEST	443	49820	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:26.463725090 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:26.463746071 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:26.474062920 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:26.474072933 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:26.487608910 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:26.487644911 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:26.487695932 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:26.492253065 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:26.492333889 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:26.492408991 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:26.492685080 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:26.492722034 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:26.493062973 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:26.493077040 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:26.539535046 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:26.539689064 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:26.539740086 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:26.540267944 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:26.540277958 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:26.540288925 CEST	49822	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:26.540292978 CEST	443	49822	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:26.547982931 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:26.548008919 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:26.548074961 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:26.548384905 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:26.548397064 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:26.600997925 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:26.601147890 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:26.601206064 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:26.601365089 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:26.601365089 CEST	49821	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:26.601394892 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:26.601418972 CEST	443	49821	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:26.605948925 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:26.606030941 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:26.606105089 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:26.606230974 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:26.606251955 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:26.955352068 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:26.956502914 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:26.956537962 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:26.957875967 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:26.957891941 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:27.082154036 CEST	49828	443	192.168.2.4	142.250.186.100
Oct 24, 2024 04:48:27.082240105 CEST	443	49828	142.250.186.100	192.168.2.4
Oct 24, 2024 04:48:27.082328081 CEST	49828	443	192.168.2.4	142.250.186.100
Oct 24, 2024 04:48:27.083121061 CEST	49828	443	192.168.2.4	142.250.186.100
Oct 24, 2024 04:48:27.083153963 CEST	443	49828	142.250.186.100	192.168.2.4
Oct 24, 2024 04:48:27.100189924 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:27.100610971 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:27.100672960 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:27.100719929 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:27.100719929 CEST	49823	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:27.100749969 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:27.100780010 CEST	443	49823	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:27.102967024 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:27.102996111 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:27.103061914 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:27.103168011 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:27.103182077 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:27.229062080 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:27.230005026 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:27.230005980 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:27.230065107 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:27.230108976 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:27.242084026 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:27.242388010 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:27.242408991 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:27.242784977 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:27.242796898 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:27.296741962 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:27.297147989 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:27.297163010 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:27.297355890 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:27.297367096 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:27.351969004 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:27.352572918 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:27.352572918 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:27.352612019 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:27.352653980 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:27.358167887 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:27.358314037 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:27.358416080 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:27.358416080 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:27.358416080 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:27.360639095 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:27.360678911 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:27.360830069 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:27.360860109 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:27.360863924 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:27.376954079 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:27.377741098 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:27.377917051 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:27.377918005 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:27.379682064 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:27.379693985 CEST	49824	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:27.379705906 CEST	443	49824	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:27.379717112 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:27.379841089 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:27.379929066 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:27.379942894 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:27.427664995 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:27.427978039 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:27.428056002 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:27.428056002 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:27.428195000 CEST	49826	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:27.428200960 CEST	443	49826	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:27.429697037 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:27.429776907 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:27.429933071 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:27.430000067 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:27.430022001 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:27.483652115 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:27.483860016 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:27.483973980 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:27.483973980 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:27.484092951 CEST	49827	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:27.484129906 CEST	443	49827	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:27.485625982 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:27.485707045 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:27.485856056 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:27.485920906 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:27.485939026 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:27.660270929 CEST	49825	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:27.660329103 CEST	443	49825	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:27.842783928 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:27.843240023 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:27.843297005 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:27.843683004 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:27.843698025 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:27.932462931 CEST	443	49828	142.250.186.100	192.168.2.4
Oct 24, 2024 04:48:27.932811975 CEST	49828	443	192.168.2.4	142.250.186.100
Oct 24, 2024 04:48:27.932869911 CEST	443	49828	142.250.186.100	192.168.2.4
Oct 24, 2024 04:48:27.933346033 CEST	443	49828	142.250.186.100	192.168.2.4
Oct 24, 2024 04:48:27.933816910 CEST	49828	443	192.168.2.4	142.250.186.100
Oct 24, 2024 04:48:27.933904886 CEST	443	49828	142.250.186.100	192.168.2.4
Oct 24, 2024 04:48:27.977850914 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:27.978043079 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:27.978154898 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:27.978154898 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:27.978154898 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:27.980441093 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:27.980515003 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:27.980811119 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:27.980812073 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:27.980879068 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:27.988337994 CEST	49828	443	192.168.2.4	142.250.186.100
Oct 24, 2024 04:48:28.113579035 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:28.113920927 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:28.113938093 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:28.114314079 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:28.114320040 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:28.120747089 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:28.121380091 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:28.121380091 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:28.121459007 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:28.121489048 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:28.165343046 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:28.165863037 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:28.165904045 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:28.165960073 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:28.165971994 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:28.221292973 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:28.221581936 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:28.221609116 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:28.221915960 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:28.221921921 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:28.244571924 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:28.244745016 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:28.245009899 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:28.245161057 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:28.245176077 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:28.245186090 CEST	49830	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:28.245191097 CEST	443	49830	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:28.247133017 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:28.247157097 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:28.247287989 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:28.247430086 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:28.247445107 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:28.253505945 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:28.253865957 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:28.253969908 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:28.254093885 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:28.254095078 CEST	49831	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:28.254137039 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:28.254168034 CEST	443	49831	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:28.259612083 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:28.259634018 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:28.259723902 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:28.259869099 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:28.259881020 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:28.285290956 CEST	49829	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:28.285351038 CEST	443	49829	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:28.297135115 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:28.297288895 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:28.297374010 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:28.297427893 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:28.297427893 CEST	49832	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:28.297462940 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:28.297492027 CEST	443	49832	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:28.299125910 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:28.299186945 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:28.299339056 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:28.299411058 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:28.299427986 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:28.351632118 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:28.351955891 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:28.352040052 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:28.352072954 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:28.352085114 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:28.352097034 CEST	49833	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:28.352102995 CEST	443	49833	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:28.353821993 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:28.353836060 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:28.353903055 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:28.354011059 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:28.354020119 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:28.728293896 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:28.728764057 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:28.728809118 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:28.729217052 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:28.729231119 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:28.859200954 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:28.859720945 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:28.859818935 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:28.859860897 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:28.859860897 CEST	49834	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:28.859883070 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:28.859896898 CEST	443	49834	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:28.862343073 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:28.862416029 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:28.862490892 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:28.862612009 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:28.862643003 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:28.983464956 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:28.984014988 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:28.984052896 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:28.984427929 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:28.984440088 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:29.003844976 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:29.004250050 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:29.004262924 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:29.004585028 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:29.004590034 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:29.035640955 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:29.036019087 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:29.036037922 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:29.036325932 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:29.036331892 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:29.081367016 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:29.081646919 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:29.081660032 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:29.081958055 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:29.081960917 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:29.134412050 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:29.134706974 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:29.134881973 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:29.134919882 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:29.134932041 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:29.134959936 CEST	49836	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:29.134964943 CEST	443	49836	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:29.137729883 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:29.137809992 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:29.137897015 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:29.138010025 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:29.138034105 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:29.166014910 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:29.166204929 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:29.166263103 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:29.166311026 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:29.166311026 CEST	49837	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:29.166337967 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:29.166367054 CEST	443	49837	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:29.168389082 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:29.168442011 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:29.168590069 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:29.168699026 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:29.168714046 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:29.192943096 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:29.193073988 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:29.193191051 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:29.193192005 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:29.193192005 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:29.194904089 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:29.194960117 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:29.195090055 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:29.195162058 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:29.195180893 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:29.207798004 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:29.207942963 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:29.208036900 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:29.208036900 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:29.208285093 CEST	49838	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:29.208291054 CEST	443	49838	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:29.209708929 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:29.209726095 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:29.209963083 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:29.209963083 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:29.210028887 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:29.503971100 CEST	49835	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:29.504029989 CEST	443	49835	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:29.617659092 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:29.618180990 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:29.618248940 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:29.620018959 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:29.620039940 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:29.752675056 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:29.752832890 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:29.752947092 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:29.752947092 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:29.752947092 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:29.755379915 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:29.755430937 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:29.755544901 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:29.755635023 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:29.755649090 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:29.878026009 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:29.878438950 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:29.878495932 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:29.878827095 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:29.878844976 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:29.917556047 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:29.917860985 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:29.917939901 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:29.918188095 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:29.918201923 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:29.940345049 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:29.940654039 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:29.940675020 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:29.940964937 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:29.940975904 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:29.956927061 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:29.957297087 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:29.957319975 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:29.957849979 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:29.957861900 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.008354902 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.008467913 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.008646011 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:30.008646011 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:30.008698940 CEST	49840	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:30.008721113 CEST	443	49840	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.011086941 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:30.011109114 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.011228085 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:30.011351109 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:30.011357069 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.064985991 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.065042973 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.065149069 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.065191984 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:30.065263987 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:30.065263987 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:30.065855026 CEST	49841	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:30.065886021 CEST	443	49841	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.067212105 CEST	49839	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:30.067212105 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:30.067265987 CEST	443	49839	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.067306995 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.067858934 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:30.067858934 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:30.067935944 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.073148966 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.073550940 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.073643923 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:30.073643923 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:30.073683023 CEST	49842	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:30.073698044 CEST	443	49842	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.075356960 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:30.075366974 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.075730085 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:30.075730085 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:30.075745106 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.089873075 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.090331078 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.090461016 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:30.090461016 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:30.090461016 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:30.092088938 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:30.092166901 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.092331886 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:30.092331886 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:30.092417002 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.394563913 CEST	49843	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:30.394598961 CEST	443	49843	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.495289087 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.495788097 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:30.495851040 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.496160984 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:30.496176958 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.625561953 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.625617981 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.625735998 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.625756979 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:30.625825882 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:30.625993013 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:30.625993013 CEST	49844	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:30.626024961 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.626049042 CEST	443	49844	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.628612041 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:30.628648043 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.628791094 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:30.629407883 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:30.629426003 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.747838020 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.749147892 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:30.749160051 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.750233889 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:30.750237942 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.805430889 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.805851936 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:30.805867910 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.806312084 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:30.806324959 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.821098089 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.821805000 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:30.821811914 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.822906971 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:30.822911024 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.826642990 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.827116013 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:30.827178955 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.827842951 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:30.827864885 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.876722097 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.876777887 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.876836061 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:30.876847029 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.876883030 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:30.876903057 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.876950979 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:30.877156019 CEST	49845	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:30.877163887 CEST	443	49845	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.882232904 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:30.882286072 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.882366896 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:30.882582903 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:30.882611990 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.936288118 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.936337948 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.936414957 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:30.936444998 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.936537027 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.936589956 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:30.945764065 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:30.945790052 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.945835114 CEST	49846	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:30.945848942 CEST	443	49846	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.951253891 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.951613903 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.951666117 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:30.955351114 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.955499887 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:30.955562115 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:31.014050961 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:31.014092922 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:31.014213085 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:31.016315937 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:31.016330004 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:31.016357899 CEST	49847	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:31.016362906 CEST	443	49847	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:31.017819881 CEST	49848	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:31.017851114 CEST	443	49848	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:31.019505978 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:31.019521952 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:31.033869982 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:31.033951044 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:31.034044981 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:31.040878057 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:31.040944099 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:31.041121006 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:31.050525904 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:31.050564051 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:31.051464081 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:31.051506996 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:31.365958929 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:31.366614103 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:31.366631985 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:31.367834091 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:31.367839098 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:31.496181011 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:31.496335030 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:31.496450901 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:31.496450901 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:31.496450901 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:31.498759031 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:31.498838902 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:31.499033928 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:31.499034882 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:31.499116898 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:31.623025894 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:31.623878956 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:31.623907089 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:31.623964071 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:31.623971939 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:31.723242044 CEST	49849	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:31.723278999 CEST	443	49849	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:31.757580042 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:31.757816076 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:31.757971048 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:31.757971048 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:31.758004904 CEST	49850	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:31.758018970 CEST	443	49850	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:31.760987997 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:31.761032104 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:31.761233091 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:31.761307955 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:31.761317015 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:31.769412041 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:31.770462036 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:31.770462036 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:31.770477057 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:31.770498037 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:31.787039995 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:31.787753105 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:31.787754059 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:31.787765026 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:31.787777901 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:31.801698923 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:31.803674936 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:31.803733110 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:31.804656982 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:31.804672003 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:31.902307034 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:31.902450085 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:31.902663946 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:31.902663946 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:31.902719975 CEST	49851	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:31.902743101 CEST	443	49851	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:31.908396006 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:31.908457994 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:31.912386894 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:31.912386894 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:31.912409067 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:31.919893026 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:31.920093060 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:31.920244932 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:31.920244932 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:31.920310974 CEST	49853	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:31.920330048 CEST	443	49853	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:31.923854113 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:31.923937082 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:31.924428940 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:31.924760103 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:31.924779892 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:31.950615883 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:31.951060057 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:31.952425003 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:31.952425003 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:31.952545881 CEST	49852	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:31.952564955 CEST	443	49852	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:31.955698967 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:31.955708981 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:31.956660032 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:31.956864119 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:31.956876993 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:32.237373114 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:32.238353014 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:32.238411903 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:32.239326000 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:32.239341021 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:32.395337105 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:32.395509958 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:32.395597935 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:32.395788908 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:32.395788908 CEST	49854	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:32.395834923 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:32.395869017 CEST	443	49854	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:32.402188063 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:32.402230978 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:32.402303934 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:32.402481079 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:32.402513027 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:32.508270979 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:32.508670092 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:32.508697987 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:32.509635925 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:32.509644032 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:32.637546062 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:32.638797045 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:32.639034033 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:32.639179945 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:32.641318083 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:32.641335011 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:32.661978960 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:32.663923979 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:32.663949966 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:32.664161921 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:32.664184093 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:32.664221048 CEST	49855	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:32.664227962 CEST	443	49855	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:32.695101976 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:32.707633018 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:32.732393980 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:32.732434988 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:32.741663933 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:32.741672039 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:32.749248981 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:32.749299049 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:32.750943899 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:32.750957966 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:32.757034063 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:32.757080078 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:32.757138014 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:32.757263899 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:32.757277012 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:32.787545919 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:32.787625074 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:32.787673950 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:32.787770987 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:32.787791967 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:32.787803888 CEST	49856	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:32.787810087 CEST	443	49856	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:32.789849043 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:32.789927959 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:32.790003061 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:32.790136099 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:32.790169954 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:32.869306087 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:32.869457960 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:32.869510889 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:32.869538069 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:32.869546890 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:32.869556904 CEST	49858	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:32.869561911 CEST	443	49858	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:32.871371031 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:32.871391058 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:32.871447086 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:32.871537924 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:32.871552944 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:32.880099058 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:32.880158901 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:32.880222082 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:32.880254030 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:32.880285978 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:32.880337954 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:32.880373955 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:32.880405903 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:32.880430937 CEST	49857	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:32.880445004 CEST	443	49857	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:32.882313013 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:32.882344961 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:32.882428885 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:32.882523060 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:32.882548094 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:33.152870893 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:33.153464079 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:33.153521061 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:33.153940916 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:33.153958082 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:33.289016962 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:33.289088011 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:33.289412022 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:33.289412022 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:33.289412022 CEST	49859	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:33.289478064 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:33.289519072 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:33.289604902 CEST	443	49859	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:33.292975903 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:33.293015003 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:33.293190956 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:33.293382883 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:33.293400049 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:33.492835045 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:33.494493008 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:33.494537115 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:33.497874975 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:33.497894049 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:33.527266026 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:33.528069973 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:33.528126955 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:33.529867887 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:33.529881954 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:33.607739925 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:33.608639956 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:33.608640909 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:33.608670950 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:33.608678102 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:33.624386072 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:33.624579906 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:33.624950886 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:33.624995947 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:33.624995947 CEST	49860	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:33.625019073 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:33.625029087 CEST	443	49860	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:33.629864931 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:33.629936934 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:33.630179882 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:33.630179882 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:33.630240917 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:33.631999016 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:33.634382010 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:33.634438992 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:33.635090113 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:33.635109901 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:33.661330938 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:33.661484003 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:33.661731005 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:33.661731005 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:33.661876917 CEST	49861	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:33.661904097 CEST	443	49861	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:33.665955067 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:33.665992975 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:33.666218042 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:33.666218042 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:33.666256905 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:33.739617109 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:33.739749908 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:33.740115881 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:33.744724989 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:33.744724989 CEST	49862	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:33.744754076 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:33.744765997 CEST	443	49862	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:33.752899885 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:33.752995968 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:33.753169060 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:33.753577948 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:33.753612995 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:33.763536930 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:33.763581991 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:33.763678074 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:33.763937950 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:33.763938904 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:33.764019966 CEST	49863	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:33.764072895 CEST	443	49863	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:33.766546965 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:33.766594887 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:33.766798973 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:33.766798973 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:33.766840935 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:34.021635056 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:34.022391081 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:34.022391081 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:34.022429943 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:34.022444010 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:34.254576921 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:34.254746914 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:34.254854918 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:34.254991055 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:34.254991055 CEST	49864	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:34.255006075 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:34.255017042 CEST	443	49864	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:34.257783890 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:34.257865906 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:34.257950068 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:34.258241892 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:34.258321047 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:34.369057894 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:34.369539976 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:34.369599104 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:34.370049000 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:34.370100975 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:34.406718016 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:34.407021999 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:34.407037973 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:34.407495022 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:34.407500029 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:34.487463951 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:34.488305092 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:34.488363028 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:34.489396095 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:34.489409924 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:34.500884056 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:34.501017094 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:34.501079082 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:34.501419067 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:34.501419067 CEST	49865	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:34.501450062 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:34.501471996 CEST	443	49865	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:34.506570101 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:34.506658077 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:34.506730080 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:34.507091045 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:34.507126093 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:34.531409979 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:34.532094002 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:34.532114029 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:34.533401966 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:34.533413887 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:34.542941093 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:34.543102026 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:34.543152094 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:34.543329000 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:34.543344021 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:34.543360949 CEST	49866	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:34.543366909 CEST	443	49866	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:34.546523094 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:34.546606064 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:34.546694994 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:34.546814919 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:34.546852112 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:34.618087053 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:34.618123055 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:34.618170023 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:34.618288040 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:34.618288040 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:34.618370056 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:34.618412971 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:34.618446112 CEST	49867	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:34.618463039 CEST	443	49867	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:34.620316982 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:34.620398045 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:34.620471954 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:34.620564938 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:34.620595932 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:34.665782928 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:34.666018963 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:34.666081905 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:34.666157007 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:34.666157961 CEST	49868	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:34.666188955 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:34.666214943 CEST	443	49868	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:34.667901039 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:34.667924881 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:34.667984962 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:34.668093920 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:34.668102980 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:35.005685091 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:35.006285906 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:35.006365061 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:35.006866932 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:35.006917953 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:35.138123989 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:35.138195992 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:35.138303995 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:35.138400078 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:35.138400078 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:35.138725996 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:35.138771057 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:35.138802052 CEST	49869	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:35.138818026 CEST	443	49869	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:35.144022942 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:35.144104958 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:35.144175053 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:35.144575119 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:35.144651890 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:35.262758970 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:35.263556957 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:35.263556957 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:35.263602972 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:35.263696909 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:35.283771038 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:35.284107924 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:35.284162998 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:35.284599066 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:35.284650087 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:35.360745907 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:35.361105919 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:35.361164093 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:35.361457109 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:35.361470938 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:35.394623041 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:35.395230055 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:35.395230055 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:35.395258904 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:35.395278931 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:35.395735025 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:35.395868063 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:35.396061897 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:35.396063089 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:35.396063089 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:35.398138046 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:35.398161888 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:35.398278952 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:35.398374081 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:35.398385048 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:35.414947033 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:35.415098906 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:35.415254116 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:35.415254116 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:35.415254116 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:35.417215109 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:35.417287111 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:35.417557001 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:35.417557001 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:35.417623997 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:35.490905046 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:35.491055965 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:35.491219044 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:35.491219997 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:35.491219997 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:35.493473053 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:35.493571043 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:35.493788004 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:35.493788004 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:35.493885040 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:35.521992922 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:35.522063971 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:35.522176981 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:35.522264957 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:35.522416115 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:35.522416115 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:35.522656918 CEST	49873	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:35.522670031 CEST	443	49873	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:35.524350882 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:35.524430990 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:35.524759054 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:35.524760008 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:35.524882078 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:35.645108938 CEST	49871	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:35.645169020 CEST	443	49871	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:35.707536936 CEST	49870	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:35.707601070 CEST	443	49870	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:35.802056074 CEST	49872	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:35.802115917 CEST	443	49872	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:35.881051064 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:35.881875038 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:35.881954908 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:35.881988049 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:35.881999016 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:36.009732008 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:36.009808064 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:36.010096073 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:36.010097027 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:36.010097027 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:36.012784004 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:36.012876987 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:36.013098955 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:36.013098955 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:36.013181925 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:36.164089918 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:36.164999962 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:36.164999962 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:36.165059090 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:36.165102005 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:36.165745020 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:36.166136026 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:36.166156054 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:36.166518927 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:36.166526079 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:36.233151913 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:36.233463049 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:36.233498096 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:36.233804941 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:36.233815908 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:36.252552986 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:36.252863884 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:36.252919912 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:36.253213882 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:36.253226995 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:36.295286894 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:36.295471907 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:36.295728922 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:36.295728922 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:36.295728922 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:36.298033953 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:36.298115015 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:36.298209906 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:36.298357010 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:36.298393011 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:36.313169956 CEST	49874	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:36.313229084 CEST	443	49874	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:36.358442068 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:36.358596087 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:36.358724117 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:36.358767033 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:36.358783007 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:36.358795881 CEST	49875	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:36.358804941 CEST	443	49875	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:36.360677958 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:36.360718966 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:36.360857964 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:36.360981941 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:36.361000061 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:36.387099981 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:36.387167931 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:36.387279987 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:36.387372017 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:36.387372017 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:36.387372017 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:36.387470961 CEST	49877	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:36.387510061 CEST	443	49877	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:36.388650894 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:36.388808966 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:36.388972998 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:36.389107943 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:36.389107943 CEST	49878	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:36.389147997 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:36.389174938 CEST	443	49878	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:36.389277935 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:36.389358044 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:36.389441013 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:36.389540911 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:36.389561892 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:36.391082048 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:36.391093016 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:36.391257048 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:36.391424894 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:36.391438961 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:36.598244905 CEST	49876	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:36.598304987 CEST	443	49876	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:36.752497911 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:36.753040075 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:36.753103018 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:36.753412008 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:36.753427029 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:36.882685900 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:36.882900953 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:36.882982016 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:36.883070946 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:36.883070946 CEST	49879	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:36.883132935 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:36.883160114 CEST	443	49879	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:36.885739088 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:36.885818005 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:36.885906935 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:36.886055946 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:36.886089087 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:37.034230947 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:37.034689903 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:37.034718037 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:37.035218954 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:37.035269976 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:37.109952927 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:37.110287905 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:37.110308886 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:37.110622883 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:37.110630035 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:37.125864983 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:37.126168013 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:37.126180887 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:37.126558065 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:37.126564026 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:37.135458946 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:37.135802031 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:37.135881901 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:37.136169910 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:37.136188984 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:37.165210962 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:37.165357113 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:37.165435076 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:37.165508986 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:37.165508986 CEST	49880	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:37.165549994 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:37.165577888 CEST	443	49880	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:37.167864084 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:37.167901039 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:37.168004990 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:37.168134928 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:37.168143988 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:37.257363081 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:37.257496119 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:37.257642031 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:37.257755041 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:37.257755995 CEST	49883	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:37.257776022 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:37.257786989 CEST	443	49883	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:37.260561943 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:37.260601044 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:37.260799885 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:37.260896921 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:37.260911942 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:37.270678043 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:37.270832062 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:37.271039963 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:37.271039963 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:37.271039963 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:37.273005009 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:37.273040056 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:37.273117065 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:37.273231983 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:37.273246050 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:37.333565950 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:37.333636999 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:37.333745956 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:37.333775997 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:37.333841085 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:37.333841085 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:37.333874941 CEST	49881	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:37.333884001 CEST	443	49881	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:37.335906029 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:37.335985899 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:37.336078882 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:37.336231947 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:37.336251020 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:37.586003065 CEST	49882	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:37.586061954 CEST	443	49882	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:37.660628080 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:37.661293983 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:37.661349058 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:37.661880016 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:37.661891937 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:37.791953087 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:37.792079926 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:37.792244911 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:37.792583942 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:37.792583942 CEST	49884	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:37.792614937 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:37.792639017 CEST	443	49884	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:37.796292067 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:37.796376944 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:37.796701908 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:37.797147989 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:37.797164917 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:37.895804882 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:37.896559954 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:37.896589041 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:37.897882938 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:37.897887945 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:37.933644056 CEST	443	49828	142.250.186.100	192.168.2.4
Oct 24, 2024 04:48:37.933708906 CEST	443	49828	142.250.186.100	192.168.2.4
Oct 24, 2024 04:48:37.934017897 CEST	49828	443	192.168.2.4	142.250.186.100
Oct 24, 2024 04:48:37.996454000 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:37.997081041 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:37.997136116 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:37.997596025 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:37.997608900 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.023654938 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.023720980 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.023829937 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.023952961 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:38.023952961 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:38.024166107 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:38.024182081 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.024389029 CEST	49885	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:38.024400949 CEST	443	49885	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.028739929 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:38.028820038 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.028983116 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:38.029881954 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:38.029915094 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.093796968 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.094716072 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:38.094716072 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:38.094774961 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.094826937 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.125264883 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.125422001 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.125577927 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:38.125755072 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:38.125792027 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.125830889 CEST	49886	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:38.125849009 CEST	443	49886	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.128671885 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:38.128700018 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.128921986 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:38.128921986 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:38.128948927 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.228822947 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.229618073 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:38.229628086 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.230705976 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:38.230710030 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.237524986 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.237658978 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.237756968 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:38.237881899 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:38.237881899 CEST	49888	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:38.237924099 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.237953901 CEST	443	49888	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.242780924 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:38.242861032 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.242957115 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:38.243093014 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:38.243124008 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.360284090 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.360322952 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.360363960 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:38.360380888 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.360394001 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.360435009 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:38.369554043 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:38.369554996 CEST	49887	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:38.369566917 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.369575024 CEST	443	49887	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.378079891 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:38.378185987 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.378262043 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:38.378407955 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:38.378432035 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.551182032 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.551754951 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:38.551765919 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.552325964 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:38.552329063 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.680346966 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.680435896 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.680483103 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:38.680490017 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.680525064 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.680589914 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:38.680763006 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:38.680771112 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.680779934 CEST	49889	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:38.680783987 CEST	443	49889	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.683593035 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:38.683672905 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.683749914 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:38.683937073 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:38.683969975 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.764810085 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.765201092 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:38.765240908 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.765582085 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:38.765594959 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.860766888 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.861116886 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:38.861131907 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.861804008 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:38.861808062 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.894131899 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.894280910 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.894357920 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:38.894531012 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:38.894567013 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.894594908 CEST	49890	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:38.894610882 CEST	443	49890	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.927941084 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:38.928003073 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.928073883 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:38.930056095 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:38.930088997 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.983602047 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.984306097 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:38.984359026 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.985306025 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:38.985318899 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.997618914 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.997693062 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.997741938 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:38.997750998 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.997821093 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:38.997874975 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:39.001468897 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:39.001477957 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:39.001490116 CEST	49891	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:39.001493931 CEST	443	49891	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:39.010200024 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:39.010270119 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:39.010353088 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:39.010615110 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:39.010647058 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:39.104173899 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:39.105132103 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:39.105160952 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:39.106014967 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:39.106028080 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:39.116940022 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:39.117253065 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:39.117316008 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:39.117415905 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:39.117415905 CEST	49892	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:39.117449045 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:39.117472887 CEST	443	49892	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:39.122272015 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:39.122344017 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:39.122410059 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:39.122634888 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:39.122684002 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:39.262311935 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:39.262383938 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:39.262486935 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:39.262664080 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:39.262664080 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:39.262706041 CEST	49893	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:39.262729883 CEST	443	49893	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:39.265887022 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:39.265968084 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:39.269947052 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:39.273885965 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:39.273921013 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:39.433772087 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:39.434288025 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:39.434343100 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:39.437938929 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:39.437952995 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:39.564789057 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:39.564848900 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:39.564981937 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:39.565187931 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:39.565226078 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:39.565267086 CEST	49894	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:39.565283060 CEST	443	49894	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:39.569881916 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:39.569945097 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:39.574049950 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:39.574049950 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:39.574115992 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:39.673178911 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:39.673926115 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:39.673926115 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:39.673985004 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:39.674040079 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:39.754451036 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:39.755000114 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:39.755043983 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:39.755101919 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:39.755112886 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:39.802953005 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:39.803601027 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:39.803818941 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:39.803818941 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:39.803818941 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:39.805546999 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:39.805584908 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:39.805716038 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:39.805784941 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:39.805799007 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:39.849064112 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:39.849596977 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:39.849638939 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:39.849682093 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:39.849700928 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:39.886225939 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:39.886375904 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:39.886581898 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:39.886581898 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:39.886581898 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:39.888137102 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:39.888160944 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:39.888361931 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:39.888395071 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:39.888398886 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:39.979085922 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:39.979156971 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:39.979249954 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:39.979346037 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:39.979346991 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:39.979406118 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:39.979406118 CEST	49897	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:39.979434967 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:39.979458094 CEST	443	49897	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:39.981093884 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:39.981151104 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:39.981287956 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:39.981344938 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:39.981359005 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:40.010713100 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:40.011457920 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:40.011459112 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:40.011518955 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:40.011557102 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:40.042001009 CEST	49828	443	192.168.2.4	142.250.186.100
Oct 24, 2024 04:48:40.042062998 CEST	443	49828	142.250.186.100	192.168.2.4
Oct 24, 2024 04:48:40.113610029 CEST	49895	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:40.113676071 CEST	443	49895	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:40.144160986 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:40.144275904 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:40.144721031 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:40.144721031 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:40.144721031 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:40.148108959 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:40.148137093 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:40.148552895 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:40.148799896 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:40.148813963 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:40.191781998 CEST	49896	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:40.191840887 CEST	443	49896	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:40.297971964 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:40.298666954 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:40.298696041 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:40.299592972 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:40.299606085 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:40.347865105 CEST	49898	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:40.347923040 CEST	443	49898	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:40.426693916 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:40.426724911 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:40.426763058 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:40.426774025 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:40.426801920 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:40.427078009 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:40.427078009 CEST	49899	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:40.427118063 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:40.427141905 CEST	443	49899	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:40.430982113 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:40.431016922 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:40.431087971 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:40.431422949 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:40.431449890 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:40.541553974 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:40.542186022 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:40.542205095 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:40.542963028 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:40.542974949 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:40.631581068 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:40.632116079 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:40.632127047 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:40.633028984 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:40.633033991 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:40.670335054 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:40.670468092 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:40.670531034 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:40.670667887 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:40.670685053 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:40.670697927 CEST	49900	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:40.670705080 CEST	443	49900	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:40.674737930 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:40.674793005 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:40.674861908 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:40.675164938 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:40.675195932 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:40.728931904 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:40.729720116 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:40.729729891 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:40.730824947 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:40.730834961 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:40.761893988 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:40.762031078 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:40.762080908 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:40.762239933 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:40.762250900 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:40.762259007 CEST	49901	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:40.762264013 CEST	443	49901	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:40.766144037 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:40.766180038 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:40.766242027 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:40.766494989 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:40.766520023 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:40.861105919 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:40.861249924 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:40.861310005 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:40.861670971 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:40.861680984 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:40.861691952 CEST	49902	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:40.861697912 CEST	443	49902	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:40.867714882 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:40.867749929 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:40.867811918 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:40.868128061 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:40.868153095 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:40.875456095 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:40.876091003 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:40.876099110 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:40.877250910 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:40.877255917 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:41.001929045 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:41.001986027 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:41.002038956 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:41.002048016 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:41.002191067 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:41.002196074 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:41.002203941 CEST	49903	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:41.002485037 CEST	443	49903	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:41.004430056 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:41.004446983 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:41.004501104 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:41.004815102 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:41.004827023 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:41.173674107 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:41.174076080 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:41.174120903 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:41.174515963 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:41.174532890 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:41.308608055 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:41.308657885 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:41.308710098 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:41.308928013 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:41.308928013 CEST	49904	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:41.308959961 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:41.308986902 CEST	443	49904	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:41.310815096 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:41.310837984 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:41.311055899 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:41.311055899 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:41.311078072 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:41.412259102 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:41.414810896 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:41.414834976 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:41.415909052 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:41.415920019 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:41.501473904 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:41.502017975 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:41.502059937 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:41.502424002 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:41.502435923 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:41.543561935 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:41.543632030 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:41.543740988 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:41.543795109 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:41.543900967 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:41.543900967 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:41.543955088 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:41.543988943 CEST	49905	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:41.544004917 CEST	443	49905	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:41.550020933 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:41.550050020 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:41.550262928 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:41.553879023 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:41.553891897 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:41.630021095 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:41.630239010 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:41.630479097 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:41.630480051 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:41.630871058 CEST	49906	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:41.630894899 CEST	443	49906	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:41.632368088 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:41.632447958 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:41.632591963 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:41.632652044 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:41.632668018 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:41.693516970 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:41.693854094 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:41.693898916 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:41.694214106 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:41.694226980 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:41.741133928 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:41.741535902 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:41.741558075 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:41.741877079 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:41.741880894 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:41.825385094 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:41.825517893 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:41.825638056 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:41.825638056 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:41.825638056 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:41.827323914 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:41.827347040 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:41.827446938 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:41.827526093 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:41.827533960 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:41.871248960 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:41.871424913 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:41.871547937 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:41.871547937 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:41.871701002 CEST	49908	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:41.871709108 CEST	443	49908	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:41.873317003 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:41.873374939 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:41.873512030 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:41.873579979 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:41.873596907 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:42.049000978 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:42.049633026 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:42.049633026 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:42.049696922 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:42.049726009 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:42.129295111 CEST	49907	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:42.129336119 CEST	443	49907	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:42.181380987 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:42.181504965 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:42.181627989 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:42.181628942 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:42.181762934 CEST	49909	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:42.181799889 CEST	443	49909	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:42.183341026 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:42.183358908 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:42.183685064 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:42.183685064 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:42.183706999 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:42.377651930 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:42.377935886 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:42.377968073 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:42.378257036 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:42.378268003 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:42.504776955 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:42.505124092 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:42.505132914 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:42.505666971 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:42.505671024 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:42.509669065 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:42.509805918 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:42.509897947 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:42.509916067 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:42.509922028 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:42.509931087 CEST	49911	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:42.509934902 CEST	443	49911	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:42.511667967 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:42.511725903 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:42.511806965 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:42.511934996 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:42.511953115 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:42.558988094 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:42.559254885 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:42.559268951 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:42.559604883 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:42.559609890 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:42.620081902 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:42.620403051 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:42.620460987 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:42.620738029 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:42.620753050 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:42.635298014 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:42.635478020 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:42.635528088 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:42.635565996 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:42.635565996 CEST	49910	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:42.635575056 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:42.635581017 CEST	443	49910	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:42.637377024 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:42.637460947 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:42.637551069 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:42.637650967 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:42.637681961 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:42.688462973 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:42.688607931 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:42.688663960 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:42.688733101 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:42.688743114 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:42.688751936 CEST	49912	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:42.688755989 CEST	443	49912	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:42.690505028 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:42.690562010 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:42.690752983 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:42.690869093 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:42.690901041 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:42.755217075 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:42.755283117 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:42.755357981 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:42.755397081 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:42.755458117 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:42.755521059 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:42.755521059 CEST	49913	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:42.755559921 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:42.755589962 CEST	443	49913	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:42.757266045 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:42.757348061 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:42.757421017 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:42.757514954 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:42.757554054 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:42.924072027 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:42.924407005 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:42.924417973 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:42.924784899 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:42.924788952 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:43.202089071 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:43.202130079 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:43.202287912 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:43.202416897 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:43.202435017 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:43.202447891 CEST	49914	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:43.202452898 CEST	443	49914	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:43.205096960 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:43.205152035 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:43.205225945 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:43.205379009 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:43.205410957 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:43.333172083 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:43.333574057 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:43.333678961 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:43.334019899 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:43.334048986 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:43.385867119 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:43.386178017 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:43.386238098 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:43.386475086 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:43.386487961 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:43.439727068 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:43.440030098 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:43.440087080 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:43.440382957 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:43.440396070 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:43.467288017 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:43.467334032 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:43.467479944 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:43.467555046 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:43.467556000 CEST	49915	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:43.467592955 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:43.467617989 CEST	443	49915	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:43.469657898 CEST	49920	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:43.469748974 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:43.469830036 CEST	49920	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:43.469954967 CEST	49920	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:43.469994068 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:43.502836943 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:43.503142118 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:43.503159046 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:43.503474951 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:43.503480911 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:43.521706104 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:43.521862030 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:43.521956921 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:43.521987915 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:43.522007942 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:43.522020102 CEST	49916	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:43.522026062 CEST	443	49916	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:43.523896933 CEST	49921	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:43.523977995 CEST	443	49921	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:43.524056911 CEST	49921	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:43.524168015 CEST	49921	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:43.524193048 CEST	443	49921	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:43.568625927 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:43.568720102 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:43.568789959 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:43.568846941 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:43.568881989 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:43.568936110 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:43.568980932 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:43.568981886 CEST	49917	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:43.569011927 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:43.569032907 CEST	443	49917	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:43.570748091 CEST	49922	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:43.570837975 CEST	443	49922	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:43.570918083 CEST	49922	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:43.571039915 CEST	49922	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:43.571077108 CEST	443	49922	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:43.635427952 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:43.635447025 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:43.635476112 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:43.635489941 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:43.635531902 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:43.635669947 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:43.635678053 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:43.635696888 CEST	49918	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:43.635701895 CEST	443	49918	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:43.637547970 CEST	49923	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:43.637629032 CEST	443	49923	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:43.637706995 CEST	49923	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:43.637821913 CEST	49923	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:43.637855053 CEST	443	49923	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:43.921184063 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:43.921510935 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:43.921536922 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:43.921860933 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:43.921874046 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:44.050636053 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:44.050653934 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:44.050693989 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:44.050714970 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:44.050812960 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:44.051089048 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:44.051089048 CEST	49919	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:44.051152945 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:44.051187992 CEST	443	49919	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:44.052977085 CEST	49924	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:44.052998066 CEST	443	49924	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:44.053098917 CEST	49924	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:44.053221941 CEST	49924	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:44.053227901 CEST	443	49924	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:44.200335979 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:44.200668097 CEST	49920	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:44.200694084 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:44.201028109 CEST	49920	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:44.201034069 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:44.261487961 CEST	443	49921	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:44.261904001 CEST	49921	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:44.261940002 CEST	443	49921	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:44.262259960 CEST	49921	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:44.262271881 CEST	443	49921	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:44.331113100 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:44.331301928 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:44.331348896 CEST	443	49922	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:44.331470013 CEST	49920	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:44.331470013 CEST	49920	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:44.331512928 CEST	49920	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:44.331532001 CEST	443	49920	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:44.331887007 CEST	49922	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:44.331898928 CEST	443	49922	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:44.332406044 CEST	49922	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:44.332412958 CEST	443	49922	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:44.334069014 CEST	49925	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:44.334187031 CEST	443	49925	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:44.334382057 CEST	49925	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:44.334382057 CEST	49925	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:44.334470034 CEST	443	49925	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:44.386177063 CEST	443	49923	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:44.386899948 CEST	49923	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:44.386899948 CEST	49923	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:44.386959076 CEST	443	49923	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:44.387001038 CEST	443	49923	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:44.392172098 CEST	443	49921	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:44.392241955 CEST	443	49921	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:44.392338991 CEST	443	49921	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:44.392374992 CEST	49921	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:44.392406940 CEST	49921	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:44.392451048 CEST	49921	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:44.392451048 CEST	49921	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:44.392479897 CEST	443	49921	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:44.392502069 CEST	443	49921	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:44.394325018 CEST	49926	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:44.394365072 CEST	443	49926	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:44.394530058 CEST	49926	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:44.394530058 CEST	49926	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:44.394556046 CEST	443	49926	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:44.518109083 CEST	443	49923	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:44.518162966 CEST	443	49923	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:44.518280029 CEST	443	49923	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:44.518421888 CEST	49923	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:44.518423080 CEST	49923	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:44.518423080 CEST	49923	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:44.518423080 CEST	49923	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:44.520207882 CEST	49927	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:44.520263910 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:44.520365000 CEST	49927	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:44.520448923 CEST	49927	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:44.520473957 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:44.784528017 CEST	443	49924	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:44.785011053 CEST	49924	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:44.785022974 CEST	443	49924	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:44.785325050 CEST	49924	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:44.785330057 CEST	443	49924	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:44.810714960 CEST	443	49922	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:44.811057091 CEST	443	49922	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:44.811249018 CEST	49922	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:44.811249018 CEST	49922	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:44.811249018 CEST	49922	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:44.813307047 CEST	49928	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:44.813328028 CEST	443	49928	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:44.813400030 CEST	49928	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:44.813812971 CEST	49928	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:44.813823938 CEST	443	49928	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:44.832335949 CEST	49923	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:44.832395077 CEST	443	49923	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:44.916297913 CEST	443	49924	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:44.916331053 CEST	443	49924	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:44.916359901 CEST	443	49924	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:44.916379929 CEST	49924	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:44.916505098 CEST	49924	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:44.916505098 CEST	49924	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:44.916827917 CEST	49924	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:44.916841030 CEST	443	49924	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:44.918699026 CEST	49929	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:44.918771982 CEST	443	49929	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:44.918900013 CEST	49929	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:44.918971062 CEST	49929	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:44.918988943 CEST	443	49929	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:45.083940029 CEST	443	49925	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:45.084525108 CEST	49925	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:45.084583998 CEST	443	49925	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:45.084738970 CEST	49925	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:45.084753990 CEST	443	49925	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:45.113683939 CEST	49922	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:45.113715887 CEST	443	49922	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:45.133224964 CEST	443	49926	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:45.133644104 CEST	49926	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:45.133661032 CEST	443	49926	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:45.134001017 CEST	49926	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:45.134006977 CEST	443	49926	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:45.217650890 CEST	443	49925	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:45.217710972 CEST	443	49925	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:45.217742920 CEST	443	49925	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:45.217797041 CEST	49925	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:45.217889071 CEST	49925	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:45.217897892 CEST	443	49925	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:45.217928886 CEST	49925	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:45.217932940 CEST	443	49925	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:45.220458984 CEST	49930	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:45.220478058 CEST	443	49930	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:45.220566988 CEST	49930	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:45.220683098 CEST	49930	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:45.220689058 CEST	443	49930	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:45.263504982 CEST	443	49926	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:45.263655901 CEST	443	49926	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:45.264072895 CEST	49926	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:45.264110088 CEST	49926	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:45.264110088 CEST	49926	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:45.264122009 CEST	443	49926	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:45.264130116 CEST	443	49926	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:45.266156912 CEST	49931	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:45.266237974 CEST	443	49931	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:45.266385078 CEST	49931	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:45.266505957 CEST	49931	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:45.266532898 CEST	443	49931	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:45.270411968 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:45.270679951 CEST	49927	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:45.270715952 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:45.271001101 CEST	49927	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:45.271014929 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:45.403665066 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:45.404578924 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:45.404648066 CEST	49927	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:45.410810947 CEST	49927	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:45.410825968 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:45.410842896 CEST	49927	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:45.410849094 CEST	443	49927	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:45.412939072 CEST	49932	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:45.413033009 CEST	443	49932	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:45.413105965 CEST	49932	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:45.413192987 CEST	49932	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:45.413212061 CEST	443	49932	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:45.555162907 CEST	443	49928	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:45.555655003 CEST	49928	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:45.555669069 CEST	443	49928	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:45.556183100 CEST	49928	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:45.556188107 CEST	443	49928	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:45.639435053 CEST	443	49929	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:45.639786959 CEST	49929	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:45.639837027 CEST	443	49929	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:45.640176058 CEST	49929	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:45.640188932 CEST	443	49929	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:45.688483953 CEST	443	49928	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:45.688632965 CEST	443	49928	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:45.688694954 CEST	49928	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:45.688776970 CEST	49928	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:45.688787937 CEST	443	49928	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:45.688797951 CEST	49928	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:45.688802004 CEST	443	49928	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:45.691998959 CEST	49933	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:45.692068100 CEST	443	49933	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:45.692179918 CEST	49933	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:45.692317009 CEST	49933	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:45.692334890 CEST	443	49933	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:45.770586014 CEST	443	49929	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:45.770682096 CEST	443	49929	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:45.770714998 CEST	443	49929	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:45.770740986 CEST	49929	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:45.770780087 CEST	49929	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:45.770862103 CEST	49929	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:45.770862103 CEST	49929	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:45.770891905 CEST	443	49929	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:45.770916939 CEST	443	49929	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:45.772981882 CEST	49934	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:45.773031950 CEST	443	49934	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:45.773101091 CEST	49934	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:45.773217916 CEST	49934	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:45.773235083 CEST	443	49934	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:45.953222036 CEST	443	49930	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:45.953515053 CEST	49930	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:45.953530073 CEST	443	49930	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:45.953867912 CEST	49930	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:45.953871965 CEST	443	49930	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:46.015053988 CEST	443	49931	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:46.015352011 CEST	49931	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:46.015393019 CEST	443	49931	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:46.015664101 CEST	49931	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:46.015675068 CEST	443	49931	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:46.084285975 CEST	443	49930	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:46.084321976 CEST	443	49930	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:46.084392071 CEST	49930	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:46.084521055 CEST	49930	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:46.084521055 CEST	49930	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:46.084532022 CEST	443	49930	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:46.084538937 CEST	443	49930	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:46.086318016 CEST	49935	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:46.086401939 CEST	443	49935	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:46.086474895 CEST	49935	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:46.086580992 CEST	49935	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:46.086601973 CEST	443	49935	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:46.146792889 CEST	443	49931	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:46.146864891 CEST	443	49931	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:46.146934032 CEST	49931	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:46.146958113 CEST	443	49931	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:46.146989107 CEST	443	49931	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:46.147053957 CEST	49931	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:46.147120953 CEST	49931	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:46.147120953 CEST	49931	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:46.147142887 CEST	443	49931	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:46.147162914 CEST	443	49931	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:46.149082899 CEST	49936	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:46.149121046 CEST	443	49936	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:46.149188995 CEST	49936	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:46.149282932 CEST	49936	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:46.149297953 CEST	443	49936	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:46.153332949 CEST	443	49932	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:46.153620005 CEST	49932	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:46.153664112 CEST	443	49932	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:46.153933048 CEST	49932	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:46.153945923 CEST	443	49932	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:46.290932894 CEST	443	49932	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:46.291098118 CEST	443	49932	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:46.291193962 CEST	49932	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:46.291246891 CEST	49932	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:46.291246891 CEST	49932	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:46.291275978 CEST	443	49932	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:46.291301012 CEST	443	49932	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:46.293168068 CEST	49937	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:46.293190956 CEST	443	49937	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:46.293474913 CEST	49937	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:46.293581009 CEST	49937	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:46.293592930 CEST	443	49937	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:46.447005987 CEST	443	49933	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:46.447402000 CEST	49933	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:46.447473049 CEST	443	49933	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:46.447855949 CEST	49933	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:46.447870016 CEST	443	49933	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:46.663089037 CEST	443	49933	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:46.663130045 CEST	443	49933	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:46.663181067 CEST	443	49933	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:46.663368940 CEST	49933	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:46.663368940 CEST	49933	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:46.664000988 CEST	49933	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:46.664041996 CEST	443	49933	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:46.665824890 CEST	49938	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:46.665908098 CEST	443	49938	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:46.666091919 CEST	49938	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:46.666091919 CEST	49938	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:46.666162968 CEST	443	49938	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:46.670108080 CEST	443	49934	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:46.670828104 CEST	49934	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:46.670828104 CEST	49934	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:46.670870066 CEST	443	49934	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:46.670891047 CEST	443	49934	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:46.808481932 CEST	443	49935	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:46.809238911 CEST	49935	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:46.809303999 CEST	443	49935	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:46.809355974 CEST	49935	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:46.809369087 CEST	443	49935	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:46.809823036 CEST	443	49934	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:46.809982061 CEST	443	49934	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:46.810116053 CEST	49934	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:46.810116053 CEST	49934	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:46.811752081 CEST	49934	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:46.811774969 CEST	443	49934	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:46.812551022 CEST	49939	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:46.812582016 CEST	443	49939	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:46.812839985 CEST	49939	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:46.812839985 CEST	49939	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:46.812869072 CEST	443	49939	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:46.950696945 CEST	443	49935	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:46.950773001 CEST	443	49935	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:46.950992107 CEST	49935	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:46.950992107 CEST	49935	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:46.950992107 CEST	49935	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:46.952709913 CEST	443	49936	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:46.953284025 CEST	49936	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:46.953361034 CEST	443	49936	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:46.953706026 CEST	49936	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:46.953706980 CEST	49940	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:46.953727007 CEST	443	49936	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:46.953764915 CEST	443	49940	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:46.953926086 CEST	49940	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:46.953979969 CEST	49940	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:46.953994036 CEST	443	49940	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:47.041012049 CEST	443	49937	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:47.041907072 CEST	49937	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:47.041907072 CEST	49937	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:47.041924953 CEST	443	49937	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:47.041943073 CEST	443	49937	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:47.082093954 CEST	443	49936	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:47.082251072 CEST	443	49936	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:47.082350969 CEST	49936	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:47.082576036 CEST	49936	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:47.082576036 CEST	49936	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:47.082618952 CEST	443	49936	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:47.082645893 CEST	443	49936	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:47.085410118 CEST	49941	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:47.085500956 CEST	443	49941	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:47.085639954 CEST	49941	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:47.085848093 CEST	49941	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:47.085880995 CEST	443	49941	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:47.173290968 CEST	443	49937	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:47.173420906 CEST	443	49937	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:47.173655987 CEST	49937	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:47.173655987 CEST	49937	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:47.174211025 CEST	49937	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:47.174222946 CEST	443	49937	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:47.175966024 CEST	49942	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:47.176044941 CEST	443	49942	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:47.176230907 CEST	49942	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:47.176230907 CEST	49942	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:47.176306963 CEST	443	49942	13.107.246.45	192.168.2.4
Oct 24, 2024 04:48:47.254158974 CEST	49935	443	192.168.2.4	13.107.246.45
Oct 24, 2024 04:48:47.254184008 CEST	443	49935	13.107.246.45	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 24, 2024 04:47:23.486582041 CEST	53	51633	1.1.1.1	192.168.2.4
Oct 24, 2024 04:47:23.513103008 CEST	53	53732	1.1.1.1	192.168.2.4
Oct 24, 2024 04:47:24.787534952 CEST	53	64853	1.1.1.1	192.168.2.4
Oct 24, 2024 04:47:25.080756903 CEST	54037	53	192.168.2.4	1.1.1.1
Oct 24, 2024 04:47:25.080851078 CEST	49697	53	192.168.2.4	1.1.1.1
Oct 24, 2024 04:47:25.092454910 CEST	53	49697	1.1.1.1	192.168.2.4
Oct 24, 2024 04:47:25.244174004 CEST	53	54037	1.1.1.1	192.168.2.4
Oct 24, 2024 04:47:26.114209890 CEST	64650	53	192.168.2.4	1.1.1.1
Oct 24, 2024 04:47:26.114211082 CEST	54930	53	192.168.2.4	1.1.1.1
Oct 24, 2024 04:47:26.114505053 CEST	56194	53	192.168.2.4	1.1.1.1
Oct 24, 2024 04:47:26.114607096 CEST	53126	53	192.168.2.4	1.1.1.1
Oct 24, 2024 04:47:26.122133970 CEST	53	54930	1.1.1.1	192.168.2.4
Oct 24, 2024 04:47:26.122165918 CEST	53	64650	1.1.1.1	192.168.2.4
Oct 24, 2024 04:47:26.123552084 CEST	53	53126	1.1.1.1	192.168.2.4
Oct 24, 2024 04:47:26.126645088 CEST	53	56194	1.1.1.1	192.168.2.4
Oct 24, 2024 04:47:27.034265041 CEST	54437	53	192.168.2.4	1.1.1.1
Oct 24, 2024 04:47:27.034554005 CEST	51246	53	192.168.2.4	1.1.1.1
Oct 24, 2024 04:47:27.041630983 CEST	53	51246	1.1.1.1	192.168.2.4
Oct 24, 2024 04:47:27.041667938 CEST	53	54437	1.1.1.1	192.168.2.4
Oct 24, 2024 04:47:27.607361078 CEST	51659	53	192.168.2.4	1.1.1.1
Oct 24, 2024 04:47:27.607542992 CEST	52358	53	192.168.2.4	1.1.1.1
Oct 24, 2024 04:47:27.614440918 CEST	53	56865	1.1.1.1	192.168.2.4
Oct 24, 2024 04:47:27.676599979 CEST	53	50031	1.1.1.1	192.168.2.4
Oct 24, 2024 04:47:27.764483929 CEST	53	52358	1.1.1.1	192.168.2.4
Oct 24, 2024 04:47:27.807550907 CEST	60541	53	192.168.2.4	1.1.1.1
Oct 24, 2024 04:47:27.807734966 CEST	51414	53	192.168.2.4	1.1.1.1
Oct 24, 2024 04:47:27.815012932 CEST	53	60541	1.1.1.1	192.168.2.4
Oct 24, 2024 04:47:27.815220118 CEST	53	51414	1.1.1.1	192.168.2.4
Oct 24, 2024 04:47:27.914527893 CEST	53	51659	1.1.1.1	192.168.2.4
Oct 24, 2024 04:47:29.713188887 CEST	52301	53	192.168.2.4	1.1.1.1
Oct 24, 2024 04:47:29.713581085 CEST	62968	53	192.168.2.4	1.1.1.1
Oct 24, 2024 04:47:29.720655918 CEST	60456	53	192.168.2.4	1.1.1.1
Oct 24, 2024 04:47:29.720793009 CEST	53390	53	192.168.2.4	1.1.1.1
Oct 24, 2024 04:47:29.727919102 CEST	53	53390	1.1.1.1	192.168.2.4
Oct 24, 2024 04:47:29.728184938 CEST	53	60456	1.1.1.1	192.168.2.4
Oct 24, 2024 04:47:29.756695986 CEST	53	49446	1.1.1.1	192.168.2.4
Oct 24, 2024 04:47:30.314325094 CEST	53	62968	1.1.1.1	192.168.2.4
Oct 24, 2024 04:47:30.314363956 CEST	53	52301	1.1.1.1	192.168.2.4
Oct 24, 2024 04:47:30.852699041 CEST	53	63116	1.1.1.1	192.168.2.4
Oct 24, 2024 04:47:36.578383923 CEST	138	138	192.168.2.4	192.168.2.255
Oct 24, 2024 04:47:41.888086081 CEST	53	51730	1.1.1.1	192.168.2.4
Oct 24, 2024 04:48:00.736265898 CEST	53	55634	1.1.1.1	192.168.2.4
Oct 24, 2024 04:48:22.860342979 CEST	53	62834	1.1.1.1	192.168.2.4
Oct 24, 2024 04:48:23.093023062 CEST	53	53918	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 24, 2024 04:47:29.756772995 CEST	192.168.2.4	1.1.1.1	c22d	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 24, 2024 04:47:25.080756903 CEST	192.168.2.4	1.1.1.1	0x53c4	Standard query (0)	jedox-couriers.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:47:25.080851078 CEST	192.168.2.4	1.1.1.1	0xd1ba	Standard query (0)	jedox-couriers.com	65	IN (0x0001)	false
Oct 24, 2024 04:47:26.114209890 CEST	192.168.2.4	1.1.1.1	0x6a18	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:47:26.114211082 CEST	192.168.2.4	1.1.1.1	0xeab1	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Oct 24, 2024 04:47:26.114505053 CEST	192.168.2.4	1.1.1.1	0xab7e	Standard query (0)	ik.imagekit.io	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:47:26.114607096 CEST	192.168.2.4	1.1.1.1	0x9bc6	Standard query (0)	ik.imagekit.io	65	IN (0x0001)	false
Oct 24, 2024 04:47:27.034265041 CEST	192.168.2.4	1.1.1.1	0x1aed	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:47:27.034554005 CEST	192.168.2.4	1.1.1.1	0x9cbc	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 24, 2024 04:47:27.607361078 CEST	192.168.2.4	1.1.1.1	0x578d	Standard query (0)	fac.corp.fortinet.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:47:27.607542992 CEST	192.168.2.4	1.1.1.1	0x3b62	Standard query (0)	fac.corp.fortinet.com	65	IN (0x0001)	false
Oct 24, 2024 04:47:27.807550907 CEST	192.168.2.4	1.1.1.1	0xd71c	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:47:27.807734966 CEST	192.168.2.4	1.1.1.1	0xded8	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Oct 24, 2024 04:47:29.713188887 CEST	192.168.2.4	1.1.1.1	0xe534	Standard query (0)	www.hdel.co.kr	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:47:29.713581085 CEST	192.168.2.4	1.1.1.1	0xdc30	Standard query (0)	www.hdel.co.kr	65	IN (0x0001)	false
Oct 24, 2024 04:47:29.720655918 CEST	192.168.2.4	1.1.1.1	0x7b03	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:47:29.720793009 CEST	192.168.2.4	1.1.1.1	0xeab0	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 24, 2024 04:47:25.244174004 CEST	1.1.1.1	192.168.2.4	0x53c4	No error (0)	jedox-couriers.com		92.205.4.171	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:47:26.122165918 CEST	1.1.1.1	192.168.2.4	0x6a18	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:47:26.122165918 CEST	1.1.1.1	192.168.2.4	0x6a18	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:47:26.122165918 CEST	1.1.1.1	192.168.2.4	0x6a18	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:47:26.122165918 CEST	1.1.1.1	192.168.2.4	0x6a18	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:47:26.123552084 CEST	1.1.1.1	192.168.2.4	0x9bc6	No error (0)	ik.imagekit.io	d28h3jm4r3crf8.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 04:47:26.126645088 CEST	1.1.1.1	192.168.2.4	0xab7e	No error (0)	ik.imagekit.io	d28h3jm4r3crf8.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 04:47:26.126645088 CEST	1.1.1.1	192.168.2.4	0xab7e	No error (0)	d28h3jm4r3crf8.cloudfront.net		18.66.122.42	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:47:26.126645088 CEST	1.1.1.1	192.168.2.4	0xab7e	No error (0)	d28h3jm4r3crf8.cloudfront.net		18.66.122.18	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:47:26.126645088 CEST	1.1.1.1	192.168.2.4	0xab7e	No error (0)	d28h3jm4r3crf8.cloudfront.net		18.66.122.48	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:47:26.126645088 CEST	1.1.1.1	192.168.2.4	0xab7e	No error (0)	d28h3jm4r3crf8.cloudfront.net		18.66.122.25	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:47:27.041630983 CEST	1.1.1.1	192.168.2.4	0x9cbc	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 24, 2024 04:47:27.041667938 CEST	1.1.1.1	192.168.2.4	0x1aed	No error (0)	www.google.com		142.250.186.100	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:47:27.815012932 CEST	1.1.1.1	192.168.2.4	0xd71c	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:47:27.815012932 CEST	1.1.1.1	192.168.2.4	0xd71c	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:47:27.815012932 CEST	1.1.1.1	192.168.2.4	0xd71c	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:47:27.815012932 CEST	1.1.1.1	192.168.2.4	0xd71c	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:47:27.914527893 CEST	1.1.1.1	192.168.2.4	0x578d	No error (0)	fac.corp.fortinet.com		208.91.114.103	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:47:29.727919102 CEST	1.1.1.1	192.168.2.4	0xeab0	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 24, 2024 04:47:29.728184938 CEST	1.1.1.1	192.168.2.4	0x7b03	No error (0)	www.google.com		142.250.186.36	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:47:30.314325094 CEST	1.1.1.1	192.168.2.4	0xdc30	No error (0)	www.hdel.co.kr	hdel.co.kr		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 04:47:30.314363956 CEST	1.1.1.1	192.168.2.4	0xe534	No error (0)	www.hdel.co.kr	hdel.co.kr		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 04:47:30.314363956 CEST	1.1.1.1	192.168.2.4	0xe534	No error (0)	hdel.co.kr		210.207.246.253	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:47:39.836772919 CEST	1.1.1.1	192.168.2.4	0x3d42	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 04:47:39.836772919 CEST	1.1.1.1	192.168.2.4	0x3d42	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:47:57.059534073 CEST	1.1.1.1	192.168.2.4	0x77e9	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 04:47:57.059534073 CEST	1.1.1.1	192.168.2.4	0x77e9	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:48:12.932092905 CEST	1.1.1.1	192.168.2.4	0xa786	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 04:48:12.932092905 CEST	1.1.1.1	192.168.2.4	0xa786	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:48:36.200859070 CEST	1.1.1.1	192.168.2.4	0xab37	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 04:48:36.200859070 CEST	1.1.1.1	192.168.2.4	0xab37	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

jedox-couriers.com

code.jquery.com

ik.imagekit.io

fac.corp.fortinet.com

www.google.com

fs.microsoft.com

slscr.update.microsoft.com

otelrules.azureedge.net

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	92.205.4.171	80	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:47:25.250809908 CEST	460	OUT	GET /5g/domain.php/domain..html? HTTP/1.1 Host: jedox-couriers.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 24, 2024 04:47:26.091686010 CEST	1236	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:47:25 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Last-Modified: Sun, 07 Jul 2024 21:08:48 GMT ETag: "230097e-480e-61caeb3e0b800-gzip" Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 6374 Keep-Alive: timeout=5 Content-Type: text/html Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 3c db 76 e2 48 92 cf d3 5f a1 a6 a6 1b d3 36 a0 1b 02 d9 45 cd 00 36 be 1b 7c bf d4 f8 d4 49 49 29 90 2d 24 2c 09 0c ae 53 1f b4 df b0 0f 7b ce fe d0 fe c2 46 66 4a 42 12 92 cb dd 33 ea ae 22 95 97 c8 88 c8 b8 65 64 aa fe ef bf ff e7 f3 af bb 83 de d5 fd 70 8f 1b 07 13 fb cb 2f 9f c9 0f 67 23 67 d4 2e 61 a7 f4 e5 17 a8 c1 c8 f8 f2 0b 07 cf e7 09 0e 10 a7 8f 91 e7 e3 a0 5d ba be ea 57 5b a5 64 93 83 26 b8 5d 9a 5b f8 75 ea 7a 41 89 d3 5d 27 c0 0e 74 7d b5 8c 60 dc 36 f0 dc d2 71 95 be 6c 71 96 63 05 16 b2 ab be 8e 6c dc 16 6a 7c 0a d4 38 08 a6 55 fc 32 b3 e6 ed d2 5d f5 ba 53 ed b9 93 29 0a 2c cd c6 09 b8 16 6e 63 63 84 73 90 f0 b0 89 3d 0f 7b 89 ce 7e e0 59 7a 50 75 3d 6b 64 39 d1 10 db 72 9e 39 cb 68 97 4c 04 c8 b9 4e 89 f3 b0 0d 7d c7 40 80 3e 0b 38 56 17 2c a7 00 d3 9a a0 11 ae 4f 9d 51 89 1b 03 fc 76 89 20 e9 6f d7 eb c8 9e 8e 51 e0 21 03 57 dd 69 60 b9 8e 5f d3 dd 49 7d 64 05 75 0f 39 46 3d 84 5d 23 43 81 a5 74 62 5f f7 ac 69 c0 f9 9e be 82 a3 bb 06 ae 3d bd cc [TRUNCATED] Data Ascii: <vH_6E6\|II)-$,S{FfJB3"edp/g#g.a]W[d&][uzA]'t}`6qlqclj\|8U2]S),nccs={~YzPu=kd9r9hLN}@>8V,OQv oQ!Wi`_I}du9F=]#Ctb_i=X\XN/gK-J{~nW/zob`J}v93s2(Y6WN\Sr<:3s"{}1;]dp!4CayX.gYWFNk#nv5pIv6;q)!R?9uDcuWQ<k,3kHy1k6'=zR58tZoq>r=[ox"M,!&$qq{:qSx,\j CQU5nAQ&jn:kAf3eNV]T>Z3kdcrFKNpi+J+F`& : erOTHpMn[)=}!LC!B\|]<VqL$}ra<0
Oct 24, 2024 04:47:26.091733932 CEST	212	IN	Data Raw: e9 51 91 de 0a c0 b4 02 e5 25 a3 b6 91 19 e4 cc 48 9d f2 36 57 2a a5 e9 31 2c 1f 54 03 2c 50 80 c0 d5 67 68 b5 31 f2 c8 0a 07 e3 fc d9 c0 4b b8 b7 56 30 1e 82 f3 46 f6 21 4c e2 af d9 62 ba ce 42 63 6d a1 c7 a1 fc ac b7 24 97 19 9c bc e3 87 7e 6c Data Ascii: Q%H6W*1,T,Pgh1KV0F!LbBcm$~leh;v4cEnWxv9]ttO/z[=RNN.Nun_]J>y?{LtpW8>Fgl7W:ixj]Y35sn
Oct 24, 2024 04:47:26.091764927 CEST	1236	IN	Data Raw: 65 67 78 d8 5b 9e 9b e6 59 6f 70 de 33 a6 a7 d7 bb c8 3d 7d 3e 38 ec f6 af 9d cb dd a3 2e 3f 7a 1e ed 35 ae 14 71 a1 9e 8e 4e 8e ba 9b d3 fd 93 8b 63 b1 73 aa dd 6b d6 c1 e8 72 b8 78 9a bd 39 e6 70 fe 14 34 bb 83 ce e9 80 1f 75 df 3a fb a3 de c1 Data Ascii: egx[Yop3=}>8.?z5qNcskrx9p4u:s4:rmwtuv7s7{,^q39\|I;Jhue/kK>xzZ1&v0_Z-=[?_/T>vu`
Oct 24, 2024 04:47:26.091798067 CEST	1236	IN	Data Raw: 56 19 23 d6 fc 65 5c fe e7 04 1b 16 e2 5c e2 f5 7d f0 2b d8 a1 b9 b4 8d 09 5a 44 fb 58 85 a0 91 cd 43 e5 a4 86 32 ec a5 fb 98 ac df c9 70 98 3c 85 46 8a 3c 19 9d a7 94 45 b2 e3 61 50 30 6b 9e 81 9e 20 3e 4f f2 18 ee b1 42 ad 63 47 9e 28 b6 69 ae Data Ascii: V#e\\}+ZDXC2p<F<EaP0k >OBcG(i )<YH <R645>^]V%Vrkh2V<a03{ GUs"0,Lj3!+?{:rU~&\oIR[Dq(vkn~?&&
Oct 24, 2024 04:47:26.091833115 CEST	1236	IN	Data Raw: 4f 08 f2 66 65 33 9e f8 6b b2 45 e0 9b 04 b3 5a b9 f2 95 5f f0 8f 91 85 90 9a e0 b9 59 40 16 cf 97 84 91 3f 2f 6a 32 dc 57 15 20 02 69 b6 62 86 19 83 bf f5 41 28 06 83 12 23 8d 9b 0c 0a e3 ca 07 a1 a8 cd 2c 2e 1a 83 f2 73 ae 7c 74 06 f4 d7 67 f8 Data Ascii: Ofe3kEZ_Y@?/j2W ibA(#,.s\|tgF@=I=P>VG0) -KQBBD>Y T%hmTF##LH("`%Ljb4C^KEY UGX2@0[*~ER
Oct 24, 2024 04:47:26.091865063 CEST	636	IN	Data Raw: 58 7f 26 80 97 ee cc 23 bf 0e 0e 00 32 ad 02 a0 0e a6 a6 81 2e 0d bb ad fd 4d 0b c8 54 9f a2 64 d8 d4 a3 67 0a bb d8 44 33 3b 29 75 1f 50 f8 6f c2 b7 6f 83 cb 79 bf 7a 3e 9f 3c 87 4a 9f 14 5a 42 92 08 66 ae 31 1d 9a 07 9d 07 66 5c 78 f5 79 a2 39 Data Ascii: X&#2.MTdgD3;)uPooyz><JZBf1f\xy9{WNDNhT"EUUIW6C!`MWRuK8"WtP~(BW:\|lO*B?+%:s>v\|&'U5_Eg!bdMsi`%z
Oct 24, 2024 04:47:26.091897964 CEST	930	IN	Data Raw: c5 3e 77 9d f3 75 ad 4e 95 c9 ae 22 24 29 52 0d e2 0b 08 cc 02 da ea c6 71 10 f1 3d ff 40 76 d0 a6 f7 d8 7e a7 a6 a5 dd e2 1b 60 86 b1 59 45 a2 a1 56 65 d4 34 ab ad 06 56 aa 86 d2 92 5a 32 16 14 05 4b 79 e8 d2 fb 19 a1 3c 66 2f 47 e8 80 1a 20 63 Data Ascii: >wuN"$)Rq=@v~`YEVe4VZ2Ky<f/G ct2%/^JJT(Ao#.E>el/9SXRj0P NQTRziQFw+i&.2 x&x_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49736	92.205.4.171	80	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:48:10.261919022 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49739	151.101.66.137	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:47:26 UTC	567	OUT	GET /jquery-2.2.4.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: http://jedox-couriers.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: http://jedox-couriers.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 02:47:26 UTC	612	IN	HTTP/1.1 200 OK Connection: close Content-Length: 85578 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-14e4a" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 731873 Date: Thu, 24 Oct 2024 02:47:26 GMT X-Served-By: cache-lga21935-LGA, cache-dfw-ktki8620037-DFW X-Cache: HIT, HIT X-Cache-Hits: 2240, 0 X-Timer: S1729738047.931081,VS0,VE1 Vary: Accept-Encoding
2024-10-24 02:47:26 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 32 2e 32 2e 34 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 6f 63 75 6d 65 6e Data Ascii: /! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a documen
2024-10-24 02:47:26 UTC	1378	IN	Data Raw: 2c 63 2c 64 2c 65 2c 66 2c 67 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 68 3d 31 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6a 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 67 26 26 28 6a 3d 67 2c 67 3d 61 72 67 75 6d 65 6e 74 73 5b 68 5d 7c 7c 7b 7d 2c 68 2b 2b 29 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 7c 7c 6e 2e 69 73 46 75 6e 63 74 69 6f 6e 28 67 29 7c 7c 28 67 3d 7b 7d 29 2c 68 3d 3d 3d 69 26 26 28 67 3d 74 68 69 73 2c 68 2d 2d 29 3b 69 3e 68 3b 68 2b 2b 29 69 66 28 6e 75 6c 6c 21 3d 28 61 3d 61 72 67 75 6d 65 6e 74 73 5b 68 5d 29 29 66 6f 72 28 62 20 69 6e 20 61 29 63 3d 67 5b 62 5d 2c 64 3d 61 5b 62 5d 2c 67 21 3d 3d 64 26 26 28 6a 26 26 64 26 26 28 6e 2e 69 73 50 6c 61 Data Ascii: ,c,d,e,f,g=arguments[0]\|\|{},h=1,i=arguments.length,j=!1;for("boolean"==typeof g&&(j=g,g=arguments[h]\|\|{},h++),"object"==typeof g\|\|n.isFunction(g)\|\|(g={}),h===i&&(g=this,h--);i>h;h++)if(null!=(a=arguments[h]))for(b in a)c=g[b],d=a[b],g!==d&&(j&&d&&(n.isPla
2024-10-24 02:47:26 UTC	1378	IN	Data Raw: 2d 22 29 2e 72 65 70 6c 61 63 65 28 71 2c 72 29 7d 2c 6e 6f 64 65 4e 61 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 2e 6e 6f 64 65 4e 61 6d 65 26 26 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3d 30 3b 69 66 28 73 28 61 29 29 7b 66 6f 72 28 63 3d 61 2e 6c 65 6e 67 74 68 3b 63 3e 64 3b 64 2b 2b 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 64 20 69 6e 20 61 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 3b 72 65 74 75 72 6e Data Ascii: -").replace(q,r)},nodeName:function(a,b){return a.nodeName&&a.nodeName.toLowerCase()===b.toLowerCase()},each:function(a,b){var c,d=0;if(s(a)){for(c=a.length;c>d;d++)if(b.call(a[d],d,a[d])===!1)break}else for(d in a)if(b.call(a[d],d,a[d])===!1)break;return
2024-10-24 02:47:26 UTC	1378	IN	Data Raw: 3d 6e 2e 74 79 70 65 28 61 29 3b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 63 7c 7c 6e 2e 69 73 57 69 6e 64 6f 77 28 61 29 3f 21 31 3a 22 61 72 72 61 79 22 3d 3d 3d 63 7c 7c 30 3d 3d 3d 62 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 62 26 26 62 3e 30 26 26 62 2d 31 20 69 6e 20 61 7d 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 70 2c 71 2c 72 2c 73 2c 74 2c 75 3d 22 73 69 7a 7a 6c 65 22 2b 31 2a 6e 65 77 20 44 61 74 65 2c 76 3d 61 2e 64 6f 63 75 6d 65 6e 74 2c 77 3d 30 2c 78 3d 30 2c 79 3d 67 61 28 29 2c 7a 3d 67 61 28 29 2c 41 3d 67 61 28 29 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 3d 3d 3d Data Ascii: =n.type(a);return"function"===c\|\|n.isWindow(a)?!1:"array"===c\|\|0===b\|\|"number"==typeof b&&b>0&&b-1 in a}var t=function(a){var b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u="sizzle"+1*new Date,v=a.document,w=0,x=0,y=ga(),z=ga(),A=ga(),B=function(a,b){return a===
2024-10-24 02:47:26 UTC	1378	IN	Data Raw: 69 22 29 2c 62 6f 6f 6c 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 3f 3a 22 2b 4b 2b 22 29 24 22 2c 22 69 22 29 2c 6e 65 65 64 73 43 6f 6e 74 65 78 74 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4c 2b 22 2a 5b 3e 2b 7e 5d 7c 3a 28 65 76 65 6e 7c 6f 64 64 7c 65 71 7c 67 74 7c 6c 74 7c 6e 74 68 7c 66 69 72 73 74 7c 6c 61 73 74 29 28 3f 3a 5c 5c 28 22 2b 4c 2b 22 2a 28 28 3f 3a 2d 5c 5c 64 29 3f 5c 5c 64 2a 29 22 2b 4c 2b 22 2a 5c 5c 29 7c 29 28 3f 3d 5b 5e 2d 5d 7c 24 29 22 2c 22 69 22 29 7d 2c 58 3d 2f 5e 28 3f 3a 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 61 7c 62 75 74 74 6f 6e 29 24 2f 69 2c 59 3d 2f 5e 68 5c 64 24 2f 69 2c 5a 3d 2f 5e 5b 5e 7b 5d 2b 5c 7b 5c 73 2a 5c 5b 6e 61 74 69 76 65 20 5c 77 2f 2c 24 3d 2f 5e 28 3f 3a 23 28 Data Ascii: i"),bool:new RegExp("^(?:"+K+")$","i"),needsContext:new RegExp("^"+L+"[>+~]\|:(even\|odd\|eq\|gt\|lt\|nth\|first\|last)(?:\$"+L+"((?:-\\d)?\\d)"+L+"\$\|)(?=[^-]\|$)","i")},X=/^(?:input\|select\|textarea\|button)$/i,Y=/^h\d$/i,Z=/^[^{]+\{\s*\[native \w/,$=/^(?:#(
2024-10-24 02:47:26 UTC	1378	IN	Data Raw: 43 61 73 65 28 29 29 7b 28 6b 3d 62 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 6b 3d 6b 2e 72 65 70 6c 61 63 65 28 61 61 2c 22 5c 5c 24 26 22 29 3a 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 6b 3d 75 29 2c 72 3d 67 28 61 29 2c 68 3d 72 2e 6c 65 6e 67 74 68 2c 6c 3d 56 2e 74 65 73 74 28 6b 29 3f 22 23 22 2b 6b 3a 22 5b 69 64 3d 27 22 2b 6b 2b 22 27 5d 22 3b 77 68 69 6c 65 28 68 2d 2d 29 72 5b 68 5d 3d 6c 2b 22 20 22 2b 71 61 28 72 5b 68 5d 29 3b 73 3d 72 2e 6a 6f 69 6e 28 22 2c 22 29 2c 77 3d 5f 2e 74 65 73 74 28 61 29 26 26 6f 61 28 62 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 62 7d 69 66 28 73 29 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 64 2c 77 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 73 Data Ascii: Case()){(k=b.getAttribute("id"))?k=k.replace(aa,"\\$&"):b.setAttribute("id",k=u),r=g(a),h=r.length,l=V.test(k)?"#"+k:"[id='"+k+"']";while(h--)r[h]=l+" "+qa(r[h]);s=r.join(","),w=_.test(a)&&oa(b.parentNode)\|\|b}if(s)try{return H.apply(d,w.querySelectorAll(s
2024-10-24 02:47:26 UTC	1378	IN	Data Raw: 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3b 72 65 74 75 72 6e 20 62 3f 22 48 54 4d 4c 22 21 3d 3d 62 2e 6e 6f 64 65 4e 61 6d 65 3a 21 31 7d 2c 6d 3d 66 61 2e 73 65 74 44 6f 63 75 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 65 2c 67 3d 61 3f 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 3a 76 3b 72 65 74 75 72 6e 20 67 21 3d 3d 6e 26 26 39 3d 3d 3d 67 2e 6e 6f 64 65 54 79 70 65 26 26 67 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3f 28 6e 3d 67 2c 6f 3d 6e 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 70 3d 21 66 28 6e 29 2c 28 65 3d 6e 2e 64 65 66 61 75 6c 74 56 69 65 77 29 26 26 65 2e 74 6f 70 21 3d 3d 65 26 26 28 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 65 2e 61 64 64 45 76 65 6e 74 4c Data Ascii: ).documentElement;return b?"HTML"!==b.nodeName:!1},m=fa.setDocument=function(a){var b,e,g=a?a.ownerDocument\|\|a:v;return g!==n&&9===g.nodeType&&g.documentElement?(n=g,o=n.documentElement,p=!f(n),(e=n.defaultView)&&e.top!==e&&(e.addEventListener?e.addEventL
2024-10-24 02:47:26 UTC	1378	IN	Data Raw: 6e 20 66 7d 2c 64 2e 66 69 6e 64 2e 43 4c 41 53 53 3d 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 70 3f 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 61 29 3a 76 6f 69 64 20 30 7d 2c 72 3d 5b 5d 2c 71 3d 5b 5d 2c 28 63 2e 71 73 61 3d 5a 2e 74 65 73 74 28 6e 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 29 29 26 26 28 69 61 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6f 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 69 64 3d 27 22 2b 75 2b 22 27 3e 3c 2f 61 Data Ascii: n f},d.find.CLASS=c.getElementsByClassName&&function(a,b){return"undefined"!=typeof b.getElementsByClassName&&p?b.getElementsByClassName(a):void 0},r=[],q=[],(c.qsa=Z.test(n.querySelectorAll))&&(ia(function(a){o.appendChild(a).innerHTML="<a id='"+u+"'></a
2024-10-24 02:47:26 UTC	1378	IN	Data Raw: 6d 65 6e 74 3a 61 2c 64 3d 62 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 61 3d 3d 3d 64 7c 7c 21 28 21 64 7c 7c 31 21 3d 3d 64 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 28 63 2e 63 6f 6e 74 61 69 6e 73 3f 63 2e 63 6f 6e 74 61 69 6e 73 28 64 29 3a 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 26 26 31 36 26 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 64 29 29 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 29 77 68 69 6c 65 28 62 3d 62 2e 70 61 72 65 6e 74 4e 6f 64 65 29 69 66 28 62 3d 3d 3d 61 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 42 3d 62 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 Data Ascii: ment:a,d=b&&b.parentNode;return a===d\|\|!(!d\|\|1!==d.nodeType\|\|!(c.contains?c.contains(d):a.compareDocumentPosition&&16&a.compareDocumentPosition(d)))}:function(a,b){if(b)while(b=b.parentNode)if(b===a)return!0;return!1},B=b?function(a,b){if(a===b)return l=!
2024-10-24 02:47:27 UTC	1378	IN	Data Raw: 72 48 61 6e 64 6c 65 5b 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 2c 66 3d 65 26 26 44 2e 63 61 6c 6c 28 64 2e 61 74 74 72 48 61 6e 64 6c 65 2c 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3f 65 28 61 2c 62 2c 21 70 29 3a 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 66 3f 66 3a 63 2e 61 74 74 72 69 62 75 74 65 73 7c 7c 21 70 3f 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 62 29 3a 28 66 3d 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 62 29 29 26 26 66 2e 73 70 65 63 69 66 69 65 64 3f 66 2e 76 61 6c 75 65 3a 6e 75 6c 6c 7d 2c 66 61 2e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 53 79 6e 74 61 78 20 65 72 72 6f 72 2c 20 75 6e 72 65 63 6f 67 6e 69 7a 65 Data Ascii: rHandle[b.toLowerCase()],f=e&&D.call(d.attrHandle,b.toLowerCase())?e(a,b,!p):void 0;return void 0!==f?f:c.attributes\|\|!p?a.getAttribute(b):(f=a.getAttributeNode(b))&&f.specified?f.value:null},fa.error=function(a){throw new Error("Syntax error, unrecognize

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49740	18.66.122.42	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:47:26 UTC	621	OUT	GET /escrowmade/Rolling-1s-200px__1__trHCWXy9jD.gif HTTP/1.1 Host: ik.imagekit.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://jedox-couriers.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 02:47:27 UTC	685	IN	HTTP/1.1 429 Too Many Requests Content-Type: text/html; charset=utf-8 Content-Length: 25 Connection: close access-control-allow-origin: * access-control-allow-methods: GET access-control-allow-headers: * timing-allow-origin: * x-server: ImageKit.io x-request-id: ef656326-622d-4e1e-bb20-962815deb259 ETag: W/"19-Sb63ye3Vgoi0fy8haTOneSzGWGM" Date: Thu, 24 Oct 2024 02:47:27 GMT Via: 1.1 57eb57a4c7d431365ab5b2e18c495bf4.cloudfront.net (CloudFront), 1.1 598a1f878f2efc16baaf47787ffe82d2.cloudfront.net (CloudFront) X-Cache: Error from cloudfront X-Amz-Cf-Pop: FRA60-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: mLsJ6JoVeE7mt6ZcMB_xQ6BqPhAB3KYTMCQovJp3D52oKAb9bDDoAQ==
2024-10-24 02:47:27 UTC	25	IN	Data Raw: 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 20 Data Ascii: Bandwidth Limit Exceeded

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49746	151.101.2.137	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:47:28 UTC	358	OUT	GET /jquery-2.2.4.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 02:47:28 UTC	612	IN	HTTP/1.1 200 OK Connection: close Content-Length: 85578 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-14e4a" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Thu, 24 Oct 2024 02:47:28 GMT Age: 731875 X-Served-By: cache-lga21935-LGA, cache-dfw-kdfw8210123-DFW X-Cache: HIT, HIT X-Cache-Hits: 2240, 1 X-Timer: S1729738049.507303,VS0,VE4 Vary: Accept-Encoding
2024-10-24 02:47:28 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 32 2e 32 2e 34 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 6f 63 75 6d 65 6e Data Ascii: /! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a documen
2024-10-24 02:47:28 UTC	1378	IN	Data Raw: 2c 63 2c 64 2c 65 2c 66 2c 67 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 68 3d 31 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6a 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 67 26 26 28 6a 3d 67 2c 67 3d 61 72 67 75 6d 65 6e 74 73 5b 68 5d 7c 7c 7b 7d 2c 68 2b 2b 29 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 7c 7c 6e 2e 69 73 46 75 6e 63 74 69 6f 6e 28 67 29 7c 7c 28 67 3d 7b 7d 29 2c 68 3d 3d 3d 69 26 26 28 67 3d 74 68 69 73 2c 68 2d 2d 29 3b 69 3e 68 3b 68 2b 2b 29 69 66 28 6e 75 6c 6c 21 3d 28 61 3d 61 72 67 75 6d 65 6e 74 73 5b 68 5d 29 29 66 6f 72 28 62 20 69 6e 20 61 29 63 3d 67 5b 62 5d 2c 64 3d 61 5b 62 5d 2c 67 21 3d 3d 64 26 26 28 6a 26 26 64 26 26 28 6e 2e 69 73 50 6c 61 Data Ascii: ,c,d,e,f,g=arguments[0]\|\|{},h=1,i=arguments.length,j=!1;for("boolean"==typeof g&&(j=g,g=arguments[h]\|\|{},h++),"object"==typeof g\|\|n.isFunction(g)\|\|(g={}),h===i&&(g=this,h--);i>h;h++)if(null!=(a=arguments[h]))for(b in a)c=g[b],d=a[b],g!==d&&(j&&d&&(n.isPla
2024-10-24 02:47:28 UTC	1378	IN	Data Raw: 2d 22 29 2e 72 65 70 6c 61 63 65 28 71 2c 72 29 7d 2c 6e 6f 64 65 4e 61 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 2e 6e 6f 64 65 4e 61 6d 65 26 26 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3d 30 3b 69 66 28 73 28 61 29 29 7b 66 6f 72 28 63 3d 61 2e 6c 65 6e 67 74 68 3b 63 3e 64 3b 64 2b 2b 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 64 20 69 6e 20 61 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 3b 72 65 74 75 72 6e Data Ascii: -").replace(q,r)},nodeName:function(a,b){return a.nodeName&&a.nodeName.toLowerCase()===b.toLowerCase()},each:function(a,b){var c,d=0;if(s(a)){for(c=a.length;c>d;d++)if(b.call(a[d],d,a[d])===!1)break}else for(d in a)if(b.call(a[d],d,a[d])===!1)break;return
2024-10-24 02:47:28 UTC	1378	IN	Data Raw: 3d 6e 2e 74 79 70 65 28 61 29 3b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 63 7c 7c 6e 2e 69 73 57 69 6e 64 6f 77 28 61 29 3f 21 31 3a 22 61 72 72 61 79 22 3d 3d 3d 63 7c 7c 30 3d 3d 3d 62 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 62 26 26 62 3e 30 26 26 62 2d 31 20 69 6e 20 61 7d 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 70 2c 71 2c 72 2c 73 2c 74 2c 75 3d 22 73 69 7a 7a 6c 65 22 2b 31 2a 6e 65 77 20 44 61 74 65 2c 76 3d 61 2e 64 6f 63 75 6d 65 6e 74 2c 77 3d 30 2c 78 3d 30 2c 79 3d 67 61 28 29 2c 7a 3d 67 61 28 29 2c 41 3d 67 61 28 29 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 3d 3d 3d Data Ascii: =n.type(a);return"function"===c\|\|n.isWindow(a)?!1:"array"===c\|\|0===b\|\|"number"==typeof b&&b>0&&b-1 in a}var t=function(a){var b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u="sizzle"+1*new Date,v=a.document,w=0,x=0,y=ga(),z=ga(),A=ga(),B=function(a,b){return a===
2024-10-24 02:47:28 UTC	1378	IN	Data Raw: 69 22 29 2c 62 6f 6f 6c 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 3f 3a 22 2b 4b 2b 22 29 24 22 2c 22 69 22 29 2c 6e 65 65 64 73 43 6f 6e 74 65 78 74 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4c 2b 22 2a 5b 3e 2b 7e 5d 7c 3a 28 65 76 65 6e 7c 6f 64 64 7c 65 71 7c 67 74 7c 6c 74 7c 6e 74 68 7c 66 69 72 73 74 7c 6c 61 73 74 29 28 3f 3a 5c 5c 28 22 2b 4c 2b 22 2a 28 28 3f 3a 2d 5c 5c 64 29 3f 5c 5c 64 2a 29 22 2b 4c 2b 22 2a 5c 5c 29 7c 29 28 3f 3d 5b 5e 2d 5d 7c 24 29 22 2c 22 69 22 29 7d 2c 58 3d 2f 5e 28 3f 3a 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 61 7c 62 75 74 74 6f 6e 29 24 2f 69 2c 59 3d 2f 5e 68 5c 64 24 2f 69 2c 5a 3d 2f 5e 5b 5e 7b 5d 2b 5c 7b 5c 73 2a 5c 5b 6e 61 74 69 76 65 20 5c 77 2f 2c 24 3d 2f 5e 28 3f 3a 23 28 Data Ascii: i"),bool:new RegExp("^(?:"+K+")$","i"),needsContext:new RegExp("^"+L+"[>+~]\|:(even\|odd\|eq\|gt\|lt\|nth\|first\|last)(?:\$"+L+"((?:-\\d)?\\d)"+L+"\$\|)(?=[^-]\|$)","i")},X=/^(?:input\|select\|textarea\|button)$/i,Y=/^h\d$/i,Z=/^[^{]+\{\s*\[native \w/,$=/^(?:#(
2024-10-24 02:47:28 UTC	1378	IN	Data Raw: 43 61 73 65 28 29 29 7b 28 6b 3d 62 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 6b 3d 6b 2e 72 65 70 6c 61 63 65 28 61 61 2c 22 5c 5c 24 26 22 29 3a 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 6b 3d 75 29 2c 72 3d 67 28 61 29 2c 68 3d 72 2e 6c 65 6e 67 74 68 2c 6c 3d 56 2e 74 65 73 74 28 6b 29 3f 22 23 22 2b 6b 3a 22 5b 69 64 3d 27 22 2b 6b 2b 22 27 5d 22 3b 77 68 69 6c 65 28 68 2d 2d 29 72 5b 68 5d 3d 6c 2b 22 20 22 2b 71 61 28 72 5b 68 5d 29 3b 73 3d 72 2e 6a 6f 69 6e 28 22 2c 22 29 2c 77 3d 5f 2e 74 65 73 74 28 61 29 26 26 6f 61 28 62 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 62 7d 69 66 28 73 29 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 64 2c 77 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 73 Data Ascii: Case()){(k=b.getAttribute("id"))?k=k.replace(aa,"\\$&"):b.setAttribute("id",k=u),r=g(a),h=r.length,l=V.test(k)?"#"+k:"[id='"+k+"']";while(h--)r[h]=l+" "+qa(r[h]);s=r.join(","),w=_.test(a)&&oa(b.parentNode)\|\|b}if(s)try{return H.apply(d,w.querySelectorAll(s
2024-10-24 02:47:28 UTC	1378	IN	Data Raw: 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3b 72 65 74 75 72 6e 20 62 3f 22 48 54 4d 4c 22 21 3d 3d 62 2e 6e 6f 64 65 4e 61 6d 65 3a 21 31 7d 2c 6d 3d 66 61 2e 73 65 74 44 6f 63 75 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 65 2c 67 3d 61 3f 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 3a 76 3b 72 65 74 75 72 6e 20 67 21 3d 3d 6e 26 26 39 3d 3d 3d 67 2e 6e 6f 64 65 54 79 70 65 26 26 67 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3f 28 6e 3d 67 2c 6f 3d 6e 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 70 3d 21 66 28 6e 29 2c 28 65 3d 6e 2e 64 65 66 61 75 6c 74 56 69 65 77 29 26 26 65 2e 74 6f 70 21 3d 3d 65 26 26 28 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 65 2e 61 64 64 45 76 65 6e 74 4c Data Ascii: ).documentElement;return b?"HTML"!==b.nodeName:!1},m=fa.setDocument=function(a){var b,e,g=a?a.ownerDocument\|\|a:v;return g!==n&&9===g.nodeType&&g.documentElement?(n=g,o=n.documentElement,p=!f(n),(e=n.defaultView)&&e.top!==e&&(e.addEventListener?e.addEventL
2024-10-24 02:47:28 UTC	1378	IN	Data Raw: 6e 20 66 7d 2c 64 2e 66 69 6e 64 2e 43 4c 41 53 53 3d 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 70 3f 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 61 29 3a 76 6f 69 64 20 30 7d 2c 72 3d 5b 5d 2c 71 3d 5b 5d 2c 28 63 2e 71 73 61 3d 5a 2e 74 65 73 74 28 6e 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 29 29 26 26 28 69 61 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6f 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 69 64 3d 27 22 2b 75 2b 22 27 3e 3c 2f 61 Data Ascii: n f},d.find.CLASS=c.getElementsByClassName&&function(a,b){return"undefined"!=typeof b.getElementsByClassName&&p?b.getElementsByClassName(a):void 0},r=[],q=[],(c.qsa=Z.test(n.querySelectorAll))&&(ia(function(a){o.appendChild(a).innerHTML="<a id='"+u+"'></a
2024-10-24 02:47:28 UTC	1378	IN	Data Raw: 6d 65 6e 74 3a 61 2c 64 3d 62 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 61 3d 3d 3d 64 7c 7c 21 28 21 64 7c 7c 31 21 3d 3d 64 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 28 63 2e 63 6f 6e 74 61 69 6e 73 3f 63 2e 63 6f 6e 74 61 69 6e 73 28 64 29 3a 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 26 26 31 36 26 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 64 29 29 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 29 77 68 69 6c 65 28 62 3d 62 2e 70 61 72 65 6e 74 4e 6f 64 65 29 69 66 28 62 3d 3d 3d 61 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 42 3d 62 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 Data Ascii: ment:a,d=b&&b.parentNode;return a===d\|\|!(!d\|\|1!==d.nodeType\|\|!(c.contains?c.contains(d):a.compareDocumentPosition&&16&a.compareDocumentPosition(d)))}:function(a,b){if(b)while(b=b.parentNode)if(b===a)return!0;return!1},B=b?function(a,b){if(a===b)return l=!
2024-10-24 02:47:28 UTC	1378	IN	Data Raw: 72 48 61 6e 64 6c 65 5b 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 2c 66 3d 65 26 26 44 2e 63 61 6c 6c 28 64 2e 61 74 74 72 48 61 6e 64 6c 65 2c 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3f 65 28 61 2c 62 2c 21 70 29 3a 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 66 3f 66 3a 63 2e 61 74 74 72 69 62 75 74 65 73 7c 7c 21 70 3f 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 62 29 3a 28 66 3d 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 62 29 29 26 26 66 2e 73 70 65 63 69 66 69 65 64 3f 66 2e 76 61 6c 75 65 3a 6e 75 6c 6c 7d 2c 66 61 2e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 53 79 6e 74 61 78 20 65 72 72 6f 72 2c 20 75 6e 72 65 63 6f 67 6e 69 7a 65 Data Ascii: rHandle[b.toLowerCase()],f=e&&D.call(d.attrHandle,b.toLowerCase())?e(a,b,!p):void 0;return void 0!==f?f:c.attributes\|\|!p?a.getAttribute(b):(f=a.getAttributeNode(b))&&f.specified?f.value:null},fa.error=function(a){throw new Error("Syntax error, unrecognize

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49742	18.66.122.42	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:47:28 UTC	621	OUT	GET /escrowmade/Rolling-1s-200px__1__trHCWXy9jD.gif HTTP/1.1 Host: ik.imagekit.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://jedox-couriers.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 02:47:28 UTC	685	IN	HTTP/1.1 429 Too Many Requests Content-Type: text/html; charset=utf-8 Content-Length: 25 Connection: close access-control-allow-origin: * access-control-allow-methods: GET access-control-allow-headers: * timing-allow-origin: * x-server: ImageKit.io x-request-id: ac837284-475b-41ee-925d-c32c8b697afb ETag: W/"19-Sb63ye3Vgoi0fy8haTOneSzGWGM" Date: Thu, 24 Oct 2024 02:47:28 GMT Via: 1.1 cfbb6e543d97587a32117dbabb25fc86.cloudfront.net (CloudFront), 1.1 f7e6fd9466c5c2a3b15f0fb077de1afa.cloudfront.net (CloudFront) X-Cache: Error from cloudfront X-Amz-Cf-Pop: FRA60-P2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: o1EQF9EqFYg2nIfF9L0C2gq9DaIBOh9OfP6mwmKrnsOyMv3uSSbMvw==
2024-10-24 02:47:28 UTC	25	IN	Data Raw: 42 61 6e 64 77 69 64 74 68 20 4c 69 6d 69 74 20 45 78 63 65 65 64 65 64 20 Data Ascii: Bandwidth Limit Exceeded

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49747	208.91.114.103	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:47:28 UTC	649	OUT	GET /customviews/image/password_hidden:93edf7d3ceb704be92ee084ecc62c6c8/ HTTP/1.1 Host: fac.corp.fortinet.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://jedox-couriers.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 02:47:28 UTC	548	IN	HTTP/1.1 404 Not Found Date: Thu, 24 Oct 2024 02:47:28 GMT Content-Length: 4288 Content-Security-Policy: script-src 'self'; style-src 'self' 'unsafe-inline'; object-src 'none'; default-src 'self'; base-uri 'self' X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding Content-Language: en X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Cache-Control: public, max-age=31536000 X-XSS-Protection: 1; mode=block Permissions-Policy: fullscreen=(self) Connection: close Content-Type: text/html; charset=utf-8
2024-10-24 02:47:28 UTC	4288	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 2f 73 69 74 65 5f 6d 65 64 69 61 2f 63 73 73 2f 66 6f 6e 74 2d 61 77 65 73 6f Data Ascii: <!DOCTYPE html><html><head> <meta http-equiv="Content-type" content="text/html; charset=UTF-8"> <meta name="referrer" content="strict-origin"> <title>Not Found</title> <link rel="stylesheet" type="text/css" href="/site_media/css/font-aweso

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49748	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:47:29 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-24 02:47:29 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=50257 Date: Thu, 24 Oct 2024 02:47:29 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49749	142.250.186.36	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:47:30 UTC	701	OUT	GET /s2/favicons?domain=hdel.co.kr HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://jedox-couriers.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 02:47:30 UTC	482	IN	HTTP/1.1 301 Moved Permanently Location: https://t3.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://hdel.co.kr&size=16 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Thu, 24 Oct 2024 02:47:30 GMT Expires: Thu, 24 Oct 2024 03:17:30 GMT Cache-Control: public, max-age=1800 Server: sffe Content-Length: 330 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 02:47:30 UTC	330	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 74 33 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 66 61 76 69 63 6f 6e 56 32 3f 63 6c 69 65 6e 74 3d 53 4f 43 49 41 4c 26 61 6d 70 3b 74 79 70 65 3d 46 41 56 49 43 4f 4e 26 61 6d 70 3b 66 61 6c 6c 62 61 63 6b 5f 6f 70 74 73 3d 54 59 50 45 2c Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>301 Moved</TITLE></HEAD><BODY><H1>301 Moved</H1>The document has moved<A HREF="https://t3.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49751	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:47:30 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-24 02:47:30 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=50336 Date: Thu, 24 Oct 2024 02:47:30 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-24 02:47:30 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49754	4.245.163.56	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:47:38 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=9phYaNtl3wACuRK&MD=M7kttt+d HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-24 02:47:38 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 824303d8-579d-4f4e-8604-5bdd5a3bbbf0 MS-RequestId: dadc9082-d3e7-4e8f-b39f-99ed010014cd MS-CV: wI9+ltJnxU66Qg4Z.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 24 Oct 2024 02:47:37 GMT Connection: close Content-Length: 24490
2024-10-24 02:47:38 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-24 02:47:38 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.4	49762	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:13 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:13 UTC	540	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:13 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 21 Oct 2024 13:21:21 GMT ETag: "0x8DCF1D34132B902" x-ms-request-id: 89fa8e61-601e-0070-0c14-24a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024813Z-r197bdfb6b4kkrkjudg185sarw000000011g00000000pxbe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:13 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-24 02:48:14 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-24 02:48:14 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-24 02:48:14 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-24 02:48:14 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-24 02:48:14 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-24 02:48:14 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-24 02:48:14 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-24 02:48:14 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-24 02:48:14 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.4	49764	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:15 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:16 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:16 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 084b2ff6-801e-0067-68fd-24fe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024816Z-r197bdfb6b46gt25anfa5gg2fw00000002pg000000003cxa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 02:48:16 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.4	49763	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:15 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:16 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:16 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 8bb6e00a-f01e-003c-3fef-248cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024816Z-15b8d89586f8nxpt5xx0pk7du8000000049g000000005r8y x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:16 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.4	49765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:15 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:16 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:16 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 394abe64-001e-0028-050b-22c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024816Z-16849878b78dghrpt8v731n7r400000006x000000000mxth x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:16 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	49766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:16 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:16 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:16 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 31a53d7e-801e-00a3-74f7-217cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024816Z-16849878b78lhh9t0fb3392enw00000006w000000000rcpr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:16 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	49767	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:16 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:16 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:16 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: e173b85d-401e-0035-56f2-2482d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024816Z-15b8d89586fdmfsg1u7xrpfws000000002q0000000007wd6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:16 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49768	4.245.163.56	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:16 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=9phYaNtl3wACuRK&MD=M7kttt+d HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-24 02:48:17 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 22a6edc8-4b2d-40a6-a535-30d787864f4c MS-RequestId: a1143cde-3e7c-458b-ad39-80109826c267 MS-CV: Ktk/0AvXgE6m3LOg.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 24 Oct 2024 02:48:16 GMT Connection: close Content-Length: 30005
2024-10-24 02:48:17 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-10-24 02:48:17 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	49770	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:17 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:17 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:17 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 9c258c29-601e-003e-66f5-243248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024817Z-r197bdfb6b4h2vctng0a0nubg80000000a4000000000p1rz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:17 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	49771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:17 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:17 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:17 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: f2ab8105-101e-0065-6df4-244088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024817Z-r197bdfb6b4lkrtc7na2dkay2800000002bg00000000n77b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:17 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49769	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:17 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:17 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:17 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 1041074d-101e-0034-30b5-2596ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024817Z-16849878b78k46f8kzwxznephs0000000730000000000q5z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 02:48:17 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	49772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:17 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:17 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:17 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: b99e46b1-a01e-001e-0499-2549ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024817Z-15b8d89586fmhkw4gksnr1w3ds0000000dv00000000031ru x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 02:48:17 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:17 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:17 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:17 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: bcb88dd7-c01e-0079-47cd-21e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024817Z-16849878b78rjhv97f3nhawr7s000000070000000000k1a1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:17 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:18 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:18 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 8c2da7e0-f01e-003c-2116-258cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024818Z-r197bdfb6b4h2vctng0a0nubg80000000a7000000000bfa0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:18 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:18 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:18 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 3c9c0adf-d01e-0028-0c96-257896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024818Z-16849878b78hz7zj8u0h2zng14000000074g00000000g8up x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:18 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:18 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:18 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 43a53b7c-f01e-005d-24fc-2413ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024818Z-15b8d89586f8nxpt5xx0pk7du800000004b0000000001q7h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:18 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49776	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:18 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:18 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:18 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 43877b29-f01e-005d-36f3-2413ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024818Z-r197bdfb6b4b582bwynewx7zgn0000000bpg00000000suv3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 02:48:18 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:18 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:18 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:18 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 6a28da67-901e-0029-53f3-24274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024818Z-r197bdfb6b4ld6jc5asqwvvz0w000000011g00000000b4xp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 02:48:18 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:19 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:19 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:19 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 04b89afe-e01e-0003-7c15-250fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024819Z-r197bdfb6b42sc4ddemybqpm140000000np000000000kkkh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:19 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:19 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:19 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:19 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 4cd68789-d01e-0017-448e-21b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024819Z-16849878b7842t5ke0k7mzbt3c00000006v000000000p585 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:19 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:19 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:19 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:19 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: fc173041-601e-0097-79ad-24f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024819Z-15b8d89586fcvr6p5956n5d0rc000000044g00000000bgkg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:19 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:19 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:19 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:19 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: c288f504-201e-0000-75f2-24a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024819Z-r197bdfb6b4t7wszdvrfk02ah400000008kg00000000ggf7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 02:48:19 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:19 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:19 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 2ab53e8b-001e-0066-7ef2-24561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024819Z-r197bdfb6b4r9fwfbdwymmgex800000000t000000000fyps x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:20 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:19 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:19 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: b140b4a4-501e-000a-80f9-240180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024819Z-15b8d89586ffsjj9qb0gmb1stn00000002h000000000f7ed x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:20 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:19 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:20 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:20 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: bb725c57-501e-005b-0eab-21d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024820Z-16849878b78hz7zj8u0h2zng140000000780000000004xdc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:20 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:20 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:20 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:20 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: b38717f8-301e-0020-78f3-246299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024820Z-15b8d89586fx2hlt035xdehq580000000dy0000000002up7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 02:48:20 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:20 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:20 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:20 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 393bb9bf-001e-0028-2805-22c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024820Z-16849878b782h9tt5z2wa5rfxg0000000740000000004c0z x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:20 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:20 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:20 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: f88dc7cb-b01e-0001-23f2-2446e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024820Z-r197bdfb6b42sc4ddemybqpm140000000nq000000000g25w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:20 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:20 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:20 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 0124f848-201e-003f-38ad-246d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024820Z-15b8d89586fs9clcgrr6f2d6vg000000010g00000000e8np x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:20 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:20 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:21 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:21 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 847e2871-001e-0079-66e3-2112e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024821Z-16849878b78fmrkt2ukpvh9wh4000000074g000000002b9h x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:21 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:20 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:21 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: ff77512b-301e-000c-17f4-24323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024821Z-15b8d89586flzzks5bs37v2b9000000002p000000000aqr6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:21 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:21 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:21 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:21 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 131e52ce-d01e-002b-553b-2225fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024821Z-16849878b782558xg5kpzay6es000000071g00000000c1fq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:21 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:21 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:21 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 26284338-e01e-0052-664d-22d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024821Z-16849878b789m94j7902zfvfr000000006w000000000qftk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:21 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:21 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:22 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:21 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: c4337264-b01e-0070-640b-221cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024821Z-16849878b788tnsxzb2smucwdc000000073g00000000cm6d x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:22 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:21 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:22 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:22 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: d2baa5f3-801e-0078-3ff3-24bac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024822Z-r197bdfb6b46gt25anfa5gg2fw00000002p0000000005wp0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:22 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:22 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:22 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:22 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 5167a131-c01e-0082-697a-25af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024822Z-15b8d89586fst84k5f3z220tec0000000dt0000000009hcz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:22 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:22 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:22 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:22 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 27632888-301e-0096-61d8-21e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024822Z-16849878b78jfqwd1dsrhqg3aw000000079g0000000005z1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:22 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:22 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:22 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:22 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 81ed7e34-d01e-008e-11ae-25387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024822Z-16849878b782558xg5kpzay6es000000070g00000000fb5w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 02:48:22 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:22 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:22 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:22 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 8700b1e1-801e-008f-0e93-212c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024822Z-16849878b785jsrm4477mv3ezn000000072g000000008ekg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:22 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:22 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:23 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:22 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 2d861f62-501e-0064-3bf5-241f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024822Z-15b8d89586f4zwgbz365q03b0c0000000dv000000000evhe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:23 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:22 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:23 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:22 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: be98e2c6-601e-0001-2b87-21faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024822Z-16849878b786vsxz21496wc2qn000000072g00000000sz5x x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:23 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:23 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:23 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:23 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 07f9ef03-d01e-0014-614d-22ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024823Z-16849878b78jfqwd1dsrhqg3aw00000007900000000022zw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:23 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:23 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:23 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:23 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 44f017bc-601e-000d-6df3-242618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024823Z-15b8d89586fx2hlt035xdehq580000000dxg00000000453f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:23 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:23 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:23 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:23 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: b59cacea-101e-000b-76f2-245e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024823Z-15b8d89586fwzdd8urmg0p1ebs00000008h000000000m2bh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:23 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:23 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:23 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:23 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: f6d2fe15-801e-007b-74f2-21e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024823Z-16849878b785f8wh85a0w3ennn000000073g000000006dtq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:23 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:23 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:23 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:23 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 80264404-901e-002a-13ad-247a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024823Z-15b8d89586fsx9lfqmgrbzpgmg0000000dw0000000006b3y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:23 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:24 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:24 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 9b08888b-e01e-0020-65f2-24de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024824Z-r197bdfb6b4vlqfn9hfre6k1s80000000bwg00000000b846 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:24 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:24 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:24 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:24 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: b92258e0-a01e-00ab-2aab-219106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024824Z-16849878b78z5q7jpbgf6e9mcw000000078g000000003gyz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:24 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:24 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:24 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:24 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: f2a27b04-801e-0047-6ef4-247265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024824Z-r197bdfb6b4r9fwfbdwymmgex800000000q000000000t4wg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 02:48:24 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:24 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:24 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 44edb34c-301e-001f-0a18-24aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024824Z-r197bdfb6b42sc4ddemybqpm140000000nsg0000000098qp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:24 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:24 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:24 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 7082da1f-601e-003d-073e-226f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024824Z-16849878b787sbpl0sv29sm89s0000000790000000001vhb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:24 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:25 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:25 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:25 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 2653a72e-001e-005a-26e6-21c3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024825Z-16849878b78p4hmjy4vha5ddqw00000006y000000000kh2t x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:25 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:25 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:25 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:25 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: e692d532-001e-00a2-3ae7-20d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024825Z-16849878b78dghrpt8v731n7r400000006yg00000000fta9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:25 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:25 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:25 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:25 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 4c87ede1-d01e-0065-6b9c-21b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024825Z-16849878b78lhh9t0fb3392enw00000006yg00000000e596 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:25 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:25 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:25 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:25 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 8e6df999-101e-007a-77ef-24047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024825Z-15b8d89586fqj7k5uht6e8nnew0000000d6g00000000k94t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:25 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:25 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:25 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:25 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 7fcc546d-701e-001e-80a3-21f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024825Z-16849878b78k46f8kzwxznephs00000006z000000000fhvf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:25 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:26 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:26 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:26 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 100b0a78-f01e-0003-754e-224453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024826Z-16849878b782558xg5kpzay6es0000000730000000007ru9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:26 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:26 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:26 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:26 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 09cb71da-201e-0033-6911-22b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024826Z-16849878b78mhkkf6kbvry07q0000000070000000000aqg5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:26 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:26 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:26 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:26 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: acb2ef9b-e01e-001f-1f33-221633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024826Z-16849878b78dsttbr1qw36rxs8000000074000000000axpf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:26 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49822	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:26 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:26 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:26 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 0ec4b2b5-f01e-0085-2d16-2488ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024826Z-15b8d89586fnsf5zm1ryrxu0bc00000002gg00000000guw0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:26 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:26 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:26 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:26 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 7cfbc72c-d01e-0082-6d55-22e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024826Z-16849878b78dsttbr1qw36rxs8000000070000000000rtd5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 02:48:26 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:26 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:27 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:27 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: d4a93cd8-001e-008d-65f5-24d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024827Z-15b8d89586flzzks5bs37v2b9000000002pg000000009tqw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 02:48:27 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:27 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:27 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 143ffe56-901e-0067-3a0b-22b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024827Z-16849878b78hz7zj8u0h2zng14000000072g00000000r1w4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:27 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:27 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:27 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:27 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: a363c0e5-301e-003f-5298-25266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024827Z-16849878b78c2tmb7nhatnd68s0000000750000000007pth x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 02:48:27 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:27 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:27 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 8b572347-501e-008c-80f2-21cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024827Z-16849878b78fmrkt2ukpvh9wh400000006z000000000n9d3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:27 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:27 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:27 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:27 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: c0884099-101e-0046-3a40-2291b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024827Z-16849878b78dsttbr1qw36rxs8000000075g000000006dwk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:27 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:27 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:27 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:27 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: ac69ef67-e01e-001f-7714-221633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024827Z-16849878b789m94j7902zfvfr00000000730000000000x47 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:27 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:28 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:28 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:28 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: f2361012-b01e-003e-18e4-218e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024828Z-16849878b78plcdqu15wsb886400000006z000000000nfa8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:28 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49831	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:28 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:28 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:28 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 34547014-f01e-003f-75cc-20d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024828Z-16849878b78dghrpt8v731n7r400000006w000000000r3n0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:28 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:28 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:28 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:28 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: fa910cef-e01e-003c-72dd-21c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024828Z-16849878b78gvgmlcfru6nuc54000000070000000000hct3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:28 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49833	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:28 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:28 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:28 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: e4f93586-101e-0046-3eac-2491b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024828Z-15b8d89586f8nxpt5xx0pk7du800000004a00000000046g5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:28 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:28 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:28 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:28 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: a2e914b6-401e-0029-5fce-219b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024828Z-16849878b785g992cz2s9gk35c000000073g00000000dsm7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:28 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49835	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:28 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:29 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:29 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 952379c8-801e-0083-0604-25f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024829Z-15b8d89586fqckbz0ssbuzzp1n00000001n000000000447k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:29 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:29 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:29 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:29 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: c82c03e6-f01e-001f-0cf2-245dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024829Z-15b8d89586f4zwgbz365q03b0c0000000du000000000h2ea x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:29 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:29 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:29 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:29 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: a983d246-401e-005b-124e-229c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024829Z-16849878b7862vlcc7m66axrs000000006zg00000000t0x2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:29 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:29 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:29 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:29 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: bd3356e8-b01e-0002-6afb-241b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024829Z-15b8d89586fmhkw4gksnr1w3ds0000000dw0000000000x34 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:29 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:29 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:29 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:29 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 2f548e5b-201e-003c-5d24-2130f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024829Z-16849878b784cpcc2dr9ch74ng0000000790000000001prn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:29 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:29 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:30 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:29 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: f906b5ab-001e-0079-7ff4-2412e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024829Z-r197bdfb6b4sn8wg20e97vn7ps0000000npg00000000ak50 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:30 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:29 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:30 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:30 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 8c481607-b01e-0053-3f2b-21cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024829Z-16849878b786vsxz21496wc2qn000000079g0000000007ut x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:30 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:29 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:30 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:30 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: e5d3cb58-101e-0046-3bf3-2491b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024830Z-r197bdfb6b4tq6ldv3s2dcykm800000000xg00000000atzg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:30 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:29 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:30 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:30 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 0856d5df-001e-00ad-56f3-24554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024830Z-r197bdfb6b4h2vctng0a0nubg80000000ab000000000049a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:30 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:30 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:30 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:30 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 0eea03f1-d01e-0066-098a-21ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024830Z-16849878b7842t5ke0k7mzbt3c00000006xg00000000c9em x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:30 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:30 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:30 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:30 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: d9905de8-801e-0083-31a7-24f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024830Z-15b8d89586frzkk2umu6w8qnt80000000dng000000006n6n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:30 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:30 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:30 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:30 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 273a8d1a-001e-0034-0d8c-21dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024830Z-16849878b787psctgubawhx7k800000006xg00000000cavv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:30 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:30 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:30 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:30 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: a956e522-e01e-0020-405a-23de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024830Z-r197bdfb6b4t7wszdvrfk02ah400000008q0000000005pfn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:30 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:30 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:30 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:30 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: c29108f7-201e-0000-1ff5-24a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024830Z-r197bdfb6b4cz6xrsdncwtgzd40000000nxg000000004cy6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:30 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:31 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:31 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:31 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 999b9529-701e-001e-53f4-24f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024831Z-r197bdfb6b4b582bwynewx7zgn0000000bsg00000000f96p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:31 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:31 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:31 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:31 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 55d9b643-201e-003f-330b-226d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024831Z-16849878b785f8wh85a0w3ennn00000006zg00000000m46s x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:31 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:31 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:31 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:31 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 1f9beeb1-d01e-0014-170b-22ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024831Z-16849878b789m94j7902zfvfr000000006w000000000qg7q x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:31 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:31 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:31 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:31 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: b140c98b-501e-000a-75f9-240180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024831Z-15b8d89586fqj7k5uht6e8nnew0000000d9000000000bf9n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 02:48:31 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:31 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:31 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:31 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 20049dc1-d01e-0014-1b33-22ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024831Z-16849878b785jsrm4477mv3ezn0000000730000000007hh3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:31 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:32 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:32 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:32 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 6129b0de-c01e-00a1-59fb-247e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024832Z-15b8d89586f2hk28h0h6zye26c00000000z0000000001rc4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:32 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:32 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:32 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:32 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 082c7638-801e-0067-65f2-24fe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024832Z-15b8d89586fst84k5f3z220tec0000000dpg00000000nz31 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:32 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:32 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:32 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:32 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 18e0c3bd-301e-001f-11f3-24aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024832Z-r197bdfb6b4cz6xrsdncwtgzd40000000nug00000000bzsz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:32 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:32 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:32 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:32 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: b5c58150-601e-0070-04f2-24a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024832Z-r197bdfb6b4qpk6v9629ad4b5s0000000bs00000000070qt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:32 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:32 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:32 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:32 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 9791ae07-d01e-0066-7bf2-24ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024832Z-r197bdfb6b4k6h5j1g5mvtmsmn0000000bg0000000008er6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:32 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:33 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:33 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:33 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 816a6405-301e-001f-06d8-21aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024833Z-16849878b78p4hmjy4vha5ddqw00000007300000000013r4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:33 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:33 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:33 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:33 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: f29ba936-801e-0047-2ef2-247265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024833Z-r197bdfb6b4lkrtc7na2dkay2800000002cg00000000hb45 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:33 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:33 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:33 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:33 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 9658afd7-401e-008c-2df3-2486c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024833Z-r197bdfb6b4k6h5j1g5mvtmsmn0000000bg0000000008es0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:33 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49862	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:33 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:33 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:33 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: e092e42d-501e-0035-603a-22c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024833Z-16849878b7842t5ke0k7mzbt3c00000006v000000000p5zg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:33 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49863	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:33 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:33 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:33 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: ce71dc49-401e-0035-7698-2582d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024833Z-15b8d89586flspj6y6m5fk442w0000000460000000004ffh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 02:48:33 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49864	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:34 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:34 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:34 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 9aa7f8dd-901e-0048-781b-24b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024834Z-r197bdfb6b4gdlhqw6kbe0ekvs0000000a40000000009spb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:34 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49865	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:34 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:34 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:34 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 106adab5-b01e-0001-11da-2046e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024834Z-16849878b787sbpl0sv29sm89s000000078g0000000032g5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:34 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:34 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:34 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:34 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: a2099384-101e-008d-760b-2292e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024834Z-16849878b7862vlcc7m66axrs0000000075g00000000659b x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:34 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49867	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:34 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:34 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:34 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 4c920d0e-c01e-008d-4cca-202eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024834Z-16849878b78gvgmlcfru6nuc54000000072000000000asqy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:34 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49868	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:34 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:34 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:34 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 9a0db76d-d01e-0017-4396-25b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024834Z-16849878b78hz7zj8u0h2zng140000000790000000001put x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 02:48:34 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49869	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:35 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:35 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:35 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 95bc9e61-201e-0051-3bf2-247340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024835Z-15b8d89586ffsjj9qb0gmb1stn00000002p0000000004ant x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:35 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49870	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:35 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:35 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:35 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 97ea84b8-d01e-005a-0430-217fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024835Z-16849878b788tnsxzb2smucwdc000000073000000000dsf8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:35 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49871	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:35 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:35 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:35 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 5342d47f-d01e-0028-2f83-217896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024835Z-16849878b78fmrkt2ukpvh9wh4000000072g000000008uth x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:35 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49872	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:35 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:35 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:35 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: c3694284-101e-0017-53f5-2447c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024835Z-15b8d89586frzkk2umu6w8qnt80000000dr000000000057q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:35 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49873	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:35 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:35 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:35 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: e8b9c1e5-a01e-001e-79f2-2449ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024835Z-15b8d89586f8l5961kfst8fpb000000008hg00000000muez x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:35 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49874	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:35 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:36 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:35 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: e3c3ecc6-001e-0014-1bf2-245151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024835Z-r197bdfb6b4lkrtc7na2dkay2800000002b000000000nv6x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:36 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49876	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:36 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:36 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:36 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: f5f98d55-001e-0049-58e4-215bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024836Z-16849878b78mhkkf6kbvry07q000000006z000000000e75b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:36 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49875	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:36 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:36 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:36 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 9f7c1011-d01e-0065-1a3b-22b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024836Z-16849878b78p6ttkmyustyrk8s0000000710000000006w94 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:36 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49877	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:36 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:36 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:36 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: a3259b44-001e-0065-2af2-240b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024836Z-r197bdfb6b4sn8wg20e97vn7ps0000000nmg00000000gr8k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:36 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49878	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:36 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:36 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:36 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: e014a2e3-501e-0035-060b-22c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024836Z-16849878b787c9z7hb8u9yysp0000000075g00000000cp16 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:36 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49879	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:36 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:36 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:36 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 74c47345-e01e-00aa-3afd-24ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024836Z-15b8d89586f989rks44whx5v7s0000000de000000000gzs6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:36 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49880	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:37 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:37 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:37 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: e1e0bfc6-201e-006e-0e0b-22bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024837Z-16849878b782h9tt5z2wa5rfxg000000070000000000h890 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:37 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49881	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:37 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:37 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:37 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 9b3a7460-601e-003e-70a8-243248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024837Z-15b8d89586fzhrwgk23ex2bvhw000000014g000000009k99 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:37 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49883	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:37 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:37 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:37 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 8522a688-a01e-0084-2768-219ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024837Z-16849878b782h9tt5z2wa5rfxg000000070000000000h896 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:37 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49882	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:37 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:37 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:37 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: c82cfbdf-e01e-00aa-7097-25ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024837Z-16849878b78lhh9t0fb3392enw00000006yg00000000e5v9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 02:48:37 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49884	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:37 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:37 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:37 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: efa6dde7-e01e-0071-750c-2208e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024837Z-16849878b7862vlcc7m66axrs0000000075g0000000065us x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:37 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49885	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:37 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:38 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:37 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 44e5e715-301e-001f-6416-24aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024837Z-15b8d89586flspj6y6m5fk442w000000046g000000003aha x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:38 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49886	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:37 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:38 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:38 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: f88de462-b01e-0001-44f2-2446e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024838Z-r197bdfb6b4sn8wg20e97vn7ps0000000nhg00000000pfxg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:38 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49888	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:38 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:38 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:38 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 697bb720-201e-0071-0781-25ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024838Z-16849878b7842t5ke0k7mzbt3c00000006x000000000dwpr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:38 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49887	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:38 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:38 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:38 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: c8caadbd-301e-0033-66ac-24fa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024838Z-15b8d89586fs9clcgrr6f2d6vg000000010g00000000e94v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:38 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49889	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:38 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:38 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:38 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 3e1d042c-d01e-00a1-73f3-2435b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024838Z-r197bdfb6b4kkm8440c459r6k800000001800000000069ae x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:38 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49890	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:38 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:38 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:38 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 21fe56fb-901e-0016-40f2-24efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024838Z-r197bdfb6b4h2vctng0a0nubg80000000aa0000000003c1k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:38 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49891	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:38 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:38 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:38 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: a1fd626a-d01e-0017-5dfc-24b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024838Z-15b8d89586fzhrwgk23ex2bvhw000000013g00000000ccdz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 02:48:38 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49892	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:38 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:39 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:38 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: ce674b06-f01e-0052-7d0b-229224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024838Z-16849878b789m94j7902zfvfr0000000071000000000754s x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:39 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49893	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:39 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:39 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:39 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: a3bd7531-e01e-0071-1007-2508e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024839Z-r197bdfb6b429k2s6br3k49qn4000000047g00000000g9f9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 02:48:39 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49894	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:39 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:39 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:39 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: b3872a13-301e-0020-3ef3-246299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024839Z-r197bdfb6b4h2vctng0a0nubg80000000a9g000000003wa1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:39 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49895	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:39 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:39 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:39 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 759e46bd-301e-003f-2df2-24266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024839Z-15b8d89586fdmfsg1u7xrpfws000000002n000000000cezn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 02:48:39 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49896	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:39 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:39 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:39 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: 88a9635a-401e-005b-7585-219c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024839Z-16849878b787sbpl0sv29sm89s000000075000000000f78r x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:39 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49897	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:39 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:39 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:39 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 8e7748fa-101e-007a-43f2-24047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024839Z-r197bdfb6b4ld6jc5asqwvvz0w000000013g000000005zs5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 02:48:39 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49898	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:40 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:40 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:40 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: 47313e64-601e-0070-1cab-25a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024840Z-16849878b78z5q7jpbgf6e9mcw000000076000000000bthk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 02:48:40 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49899	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:40 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:40 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:40 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: 10ca92f3-d01e-008e-1b31-22387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024840Z-16849878b78p6ttkmyustyrk8s00000006wg00000000prn8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:40 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49900	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:40 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:40 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:40 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: 02f2b425-901e-0064-56fc-24e8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024840Z-r197bdfb6b4lbgfqwkqbrm672s00000000sg00000000mbyq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:40 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49901	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:40 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:40 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:40 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 35e941fb-301e-005d-58de-21e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024840Z-16849878b786vsxz21496wc2qn000000075000000000esvn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:40 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49902	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:40 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:40 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:40 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: f2a77495-101e-0065-65f3-244088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024840Z-15b8d89586f42m673h1quuee4s00000002h0000000004xcs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 02:48:40 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49903	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:40 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:40 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:40 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: c53c8a19-f01e-0096-07f7-2110ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024840Z-16849878b784cpcc2dr9ch74ng0000000790000000001qau x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:40 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	49904	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:48:41 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 02:48:41 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:48:41 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: f0353451-e01e-0071-7340-2208e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T024841Z-16849878b78k8q5pxkgux3mbgg00000006y000000000ttau x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 02:48:41 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Target ID:	0
Start time:	22:47:18
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	22:47:21
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2220 --field-trial-handle=2012,i,6327137185883001771,1882968587484693107,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	22:47:24
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://jedox-couriers.com/5g/domain.php/domain..html?#infoland@hdel.co.kr"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 2.16.100.168
Source: unknown	TCP traffic detected without corresponding DNS query: 2.16.100.168
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://jedox-couriers.com/5g/domain.php/domain..html?#infoland@hdel.co.kr

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 45

Chrome Cache Entry: 46

Chrome Cache Entry: 47

Chrome Cache Entry: 48

Chrome Cache Entry: 49

Chrome Cache Entry: 50

Chrome Cache Entry: 51

Chrome Cache Entry: 52

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTP Packets

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 344, Parent PID: 5816

General

Chronological Activities

Analysis Process: chrome.exePID: 2668, Parent PID: 344

Windows Analysis Report
http://jedox-couriers.com/5g/domain.php/domain..html?#infoland@hdel.co.kr