Edit tour

Windows Analysis Report
http://152.199.19.160

Overview

General Information

Sample URL:	http://152.199.19.160
Analysis ID:	1541832
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Detected non-DNS traffic on DNS port

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4564 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2128 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=2036,i,8925119559714918307,14479116229223773409,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6264 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://152.199.19.160" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: http://152.199.19.160/

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:58129 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.4:58155 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.4:58127 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 152.199.19.160
Source: unknown	TCP traffic detected without corresponding DNS query: 152.199.19.160
Source: unknown	TCP traffic detected without corresponding DNS query: 152.199.19.160
Source: unknown	TCP traffic detected without corresponding DNS query: 152.199.19.160
Source: unknown	TCP traffic detected without corresponding DNS query: 152.199.19.160
Source: unknown	TCP traffic detected without corresponding DNS query: 152.199.19.160
Source: unknown	TCP traffic detected without corresponding DNS query: 152.199.19.160
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 152.199.19.160

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Opw6z62P+8Nmt9P&MD=zxVWrRUS HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Opw6z62P+8Nmt9P&MD=zxVWrRUS HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 152.199.19.160Connection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: 152.199.19.160Connection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://152.199.19.160/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic

DNS traffic detected: DNS query: www.google.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlContent-Length: 345Date: Fri, 25 Oct 2024 06:20:50 GMTServer: ECLF (lhc/7937)Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0a 20 20 20 20 20 20 20 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 09 3c 2f 68 65 61 64 3e 0a 09 3c 62 6f 64 79 3e 0a 09 09 3c 68 31 3e 34 30 34 20 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 09 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head><title>404 - Not Found</title></head><body><h1>404 - Not Found</h1></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlContent-Length: 345Date: Fri, 25 Oct 2024 06:20:50 GMTServer: ECLF (lhc/7937)Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0a 20 20 20 20 20 20 20 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 09 3c 2f 68 65 61 64 3e 0a 09 3c 62 6f 64 79 3e 0a 09 09 3c 68 31 3e 34 30 34 20 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 09 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head><title>404 - Not Found</title></head><body><h1>404 - Not Found</h1></body></html>

Source: unknown	Network traffic detected: HTTP traffic on port 58295 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 58272 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58219
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58216
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58215
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58218
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58217
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58223
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58222
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58225
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58224
Source: unknown	Network traffic detected: HTTP traffic on port 58317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58221
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58220
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 58192 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58305 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58227
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58226
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58229
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58228
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58234
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58233
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58236
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58235
Source: unknown	Network traffic detected: HTTP traffic on port 58283 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58230
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58232
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58231
Source: unknown	Network traffic detected: HTTP traffic on port 58214 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58249 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58306 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58157 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58226 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58180 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58238
Source: unknown	Network traffic detected: HTTP traffic on port 58146 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58237
Source: unknown	Network traffic detected: HTTP traffic on port 58169 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58239
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58245
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58244
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58247
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58246
Source: unknown	Network traffic detected: HTTP traffic on port 58259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58241
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58240
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58243
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58242
Source: unknown	Network traffic detected: HTTP traffic on port 58133 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58271 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58135 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58248 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58249
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58248
Source: unknown	Network traffic detected: HTTP traffic on port 58296 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58129
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58135
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58256
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58134
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58255
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58137
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58258
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58136
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58257
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58131
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58252
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58251
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58130
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58133
Source: unknown	Network traffic detected: HTTP traffic on port 58237 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58254
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58132
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58253
Source: unknown	Network traffic detected: HTTP traffic on port 58260 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58250
Source: unknown	Network traffic detected: HTTP traffic on port 58304 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58144 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58167 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58300
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58302
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58301
Source: unknown	Network traffic detected: HTTP traffic on port 58215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58294 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58273 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58308
Source: unknown	Network traffic detected: HTTP traffic on port 58238 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58307
Source: unknown	Network traffic detected: HTTP traffic on port 58204 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58309
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58304
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58303
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58306
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58305
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58311
Source: unknown	Network traffic detected: HTTP traffic on port 58316 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58310
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58313
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58312
Source: unknown	Network traffic detected: HTTP traffic on port 58262 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58178 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58191 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58216 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58239 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58319
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58318
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58315
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58314
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58317
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58316
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58201
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58322
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58200
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58321
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58203
Source: unknown	Network traffic detected: HTTP traffic on port 58315 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58324
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58202
Source: unknown	Network traffic detected: HTTP traffic on port 58284 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58323
Source: unknown	Network traffic detected: HTTP traffic on port 58261 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58320
Source: unknown	Network traffic detected: HTTP traffic on port 58156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58179 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58190 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58250 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58209
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58208
Source: unknown	Network traffic detected: HTTP traffic on port 58145 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58205
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58204
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58207
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58206
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58212
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58211
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58214
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58213
Source: unknown	Network traffic detected: HTTP traffic on port 58205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58210
Source: unknown	Network traffic detected: HTTP traffic on port 58134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58314 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58186
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58185
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58188
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58187
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58182
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58181
Source: unknown	Network traffic detected: HTTP traffic on port 58263 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58184
Source: unknown	Network traffic detected: HTTP traffic on port 58286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58183
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58180
Source: unknown	Network traffic detected: HTTP traffic on port 58137 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58160 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58217 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58298 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58197
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58196
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58199
Source: unknown	Network traffic detected: HTTP traffic on port 58228 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58198
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58193
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58192
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58195
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58194
Source: unknown	Network traffic detected: HTTP traffic on port 58195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58191
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58190
Source: unknown	Network traffic detected: HTTP traffic on port 58302 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58251 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58206 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58194 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58303 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 58240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58149 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58285 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58218 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58139
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58138
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58259
Source: unknown	Network traffic detected: HTTP traffic on port 58182 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58267
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58146
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58145
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58266
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58148
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58269
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58147
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58268
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58142
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58263
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58141
Source: unknown	Network traffic detected: HTTP traffic on port 58230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58262
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58144
Source: unknown	Network traffic detected: HTTP traffic on port 58253 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58265
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58143
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58264
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58140
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58261
Source: unknown	Network traffic detected: HTTP traffic on port 58324 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58260
Source: unknown	Network traffic detected: HTTP traffic on port 58158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58149
Source: unknown	Network traffic detected: HTTP traffic on port 58147 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58157
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58278
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58156
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58277
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58159
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58158
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58279
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58153
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58152
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58273
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58155
Source: unknown	Network traffic detected: HTTP traffic on port 58207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58276
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58154
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58275
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58270
Source: unknown	Network traffic detected: HTTP traffic on port 58287 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58151
Source: unknown	Network traffic detected: HTTP traffic on port 58170 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58272
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58150
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58271
Source: unknown	Network traffic detected: HTTP traffic on port 58136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58241 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58297 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58312 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58168
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58289
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58167
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58288
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58169
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58164
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58285
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58163
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58284
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58166
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58287
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58165
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58286
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58160
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58281
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58280
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58162
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58283
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58161
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58282
Source: unknown	Network traffic detected: HTTP traffic on port 58171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58275 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58179
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58178
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58299
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58175
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58296
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58174
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58295
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58177
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58176
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58297
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58171
Source: unknown	Network traffic detected: HTTP traffic on port 58193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58292
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58170
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58291
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58173
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58294
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58172
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58293
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58290
Source: unknown	Network traffic detected: HTTP traffic on port 58159 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58220 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58231 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58323 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58266 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58232 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58288 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58322 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58265 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58311 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58254 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58300 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58299 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58310 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58150 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58196 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58129 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58256 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58222 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58278 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58309 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58162 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58244 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58321 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58234 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58320 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58246 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58200 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58268 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58293 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58188 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58319 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58166 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58212 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58308 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58224 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58291 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58307 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58198 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58236 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58202 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58281 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58258 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58318 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58176 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:58129 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.4:58155 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@21/4@2/4

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=2036,i,8925119559714918307,14479116229223773409,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://152.199.19.160"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=2036,i,8925119559714918307,14479116229223773409,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://152.199.19.160	0%	Virustotal		Browse

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
www.google.com	172.217.16.196	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://152.199.19.160/	false		unknown
http://152.199.19.160/favicon.ico	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
152.199.19.160	unknown	United States	15133	EDGECASTUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.217.16.196	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1541832
Start date and time:	2024-10-25 08:19:44 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 19s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://152.199.19.160
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@21/4@2/4
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.163, 74.125.71.84, 216.58.206.46, 34.104.35.123, 2.19.126.137, 2.19.126.163, 13.95.31.18, 192.229.221.95, 40.69.42.241, 172.217.16.131
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, otelrules.afd.azureedge.net, clientservices.googleapis.com, ctldl.windowsupdate.com, a767.dspw65.akamai.net, download.windowsupdate.com.edgesuite.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, ocsp.edge.digicert.com, update.googleapis.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com, wu-b-net.trafficmanager.net
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	downloaded
Size (bytes):	345
Entropy (8bit):	5.3169667306409485
Encrypted:	false
SSDEEP:	6:TMVBdoIUnWn8FX0wa9Fgc4svquXsLwFcn4mc4sVI/iHI05zFFR/H4Cm0wFFtcQL:TMHdoIWWnMEwKFcuX4wp57BpFRgCmlFx
MD5:	D8F540E3C342B32C8CFE52DC8F2A8F97
SHA1:	11A8D74E4A92DF2BC378EFA85FB65F10365E1B1B
SHA-256:	17B3914195AD4AAE3F4486A351FE9172AADA062DAD7FCC78BCA5894221A6C019
SHA-512:	29217A8F4EB7CC003013D1D2BCC2551A01B57790032FDD9B93471BB77DDEF93F72A4EFF2EAB71DCB640A60750B542A0CF40A2734CF65F1EFB0836F188813C54C
Malicious:	false
Reputation:	low
URL:	http://152.199.19.160/
Preview:	<?xml version="1.0" encoding="iso-8859-1"?>.<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN". "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">.<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">..<head>...<title>404 - Not Found</title>..</head>..<body>...<h1>404 - Not Found</h1>..</body>.</html>.

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	downloaded
Size (bytes):	345
Entropy (8bit):	5.3169667306409485
Encrypted:	false
SSDEEP:	6:TMVBdoIUnWn8FX0wa9Fgc4svquXsLwFcn4mc4sVI/iHI05zFFR/H4Cm0wFFtcQL:TMHdoIWWnMEwKFcuX4wp57BpFRgCmlFx
MD5:	D8F540E3C342B32C8CFE52DC8F2A8F97
SHA1:	11A8D74E4A92DF2BC378EFA85FB65F10365E1B1B
SHA-256:	17B3914195AD4AAE3F4486A351FE9172AADA062DAD7FCC78BCA5894221A6C019
SHA-512:	29217A8F4EB7CC003013D1D2BCC2551A01B57790032FDD9B93471BB77DDEF93F72A4EFF2EAB71DCB640A60750B542A0CF40A2734CF65F1EFB0836F188813C54C
Malicious:	false
Reputation:	low
URL:	http://152.199.19.160/favicon.ico
Preview:	<?xml version="1.0" encoding="iso-8859-1"?>.<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN". "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">.<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">..<head>...<title>404 - Not Found</title>..</head>..<body>...<h1>404 - Not Found</h1>..</body>.</html>.

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 25, 2024 08:20:48.004481077 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 25, 2024 08:20:49.528307915 CEST	49736	80	192.168.2.4	152.199.19.160
Oct 25, 2024 08:20:49.528312922 CEST	49735	80	192.168.2.4	152.199.19.160
Oct 25, 2024 08:20:49.533935070 CEST	80	49736	152.199.19.160	192.168.2.4
Oct 25, 2024 08:20:49.534020901 CEST	80	49735	152.199.19.160	192.168.2.4
Oct 25, 2024 08:20:49.534060955 CEST	49736	80	192.168.2.4	152.199.19.160
Oct 25, 2024 08:20:49.534219027 CEST	49735	80	192.168.2.4	152.199.19.160
Oct 25, 2024 08:20:49.535561085 CEST	49736	80	192.168.2.4	152.199.19.160
Oct 25, 2024 08:20:49.540867090 CEST	80	49736	152.199.19.160	192.168.2.4
Oct 25, 2024 08:20:50.344297886 CEST	80	49736	152.199.19.160	192.168.2.4
Oct 25, 2024 08:20:50.387805939 CEST	49736	80	192.168.2.4	152.199.19.160
Oct 25, 2024 08:20:50.393280983 CEST	80	49736	152.199.19.160	192.168.2.4
Oct 25, 2024 08:20:50.616627932 CEST	80	49736	152.199.19.160	192.168.2.4
Oct 25, 2024 08:20:50.659470081 CEST	49736	80	192.168.2.4	152.199.19.160
Oct 25, 2024 08:20:51.808917999 CEST	49739	443	192.168.2.4	172.217.16.196
Oct 25, 2024 08:20:51.808965921 CEST	443	49739	172.217.16.196	192.168.2.4
Oct 25, 2024 08:20:51.809226036 CEST	49739	443	192.168.2.4	172.217.16.196
Oct 25, 2024 08:20:51.809310913 CEST	49739	443	192.168.2.4	172.217.16.196
Oct 25, 2024 08:20:51.809329987 CEST	443	49739	172.217.16.196	192.168.2.4
Oct 25, 2024 08:20:52.301318884 CEST	49740	443	192.168.2.4	184.28.90.27
Oct 25, 2024 08:20:52.301409960 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 25, 2024 08:20:52.301615953 CEST	49740	443	192.168.2.4	184.28.90.27
Oct 25, 2024 08:20:52.303018093 CEST	49740	443	192.168.2.4	184.28.90.27
Oct 25, 2024 08:20:52.303055048 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 25, 2024 08:20:52.679682970 CEST	443	49739	172.217.16.196	192.168.2.4
Oct 25, 2024 08:20:52.680238962 CEST	49739	443	192.168.2.4	172.217.16.196
Oct 25, 2024 08:20:52.680272102 CEST	443	49739	172.217.16.196	192.168.2.4
Oct 25, 2024 08:20:52.681938887 CEST	443	49739	172.217.16.196	192.168.2.4
Oct 25, 2024 08:20:52.682097912 CEST	49739	443	192.168.2.4	172.217.16.196
Oct 25, 2024 08:20:52.683120966 CEST	49739	443	192.168.2.4	172.217.16.196
Oct 25, 2024 08:20:52.683232069 CEST	443	49739	172.217.16.196	192.168.2.4
Oct 25, 2024 08:20:52.734098911 CEST	49739	443	192.168.2.4	172.217.16.196
Oct 25, 2024 08:20:52.734129906 CEST	443	49739	172.217.16.196	192.168.2.4
Oct 25, 2024 08:20:52.781002998 CEST	49739	443	192.168.2.4	172.217.16.196
Oct 25, 2024 08:20:53.155620098 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 25, 2024 08:20:53.155710936 CEST	49740	443	192.168.2.4	184.28.90.27
Oct 25, 2024 08:20:53.159593105 CEST	49740	443	192.168.2.4	184.28.90.27
Oct 25, 2024 08:20:53.159609079 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 25, 2024 08:20:53.160103083 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 25, 2024 08:20:53.204716921 CEST	49740	443	192.168.2.4	184.28.90.27
Oct 25, 2024 08:20:53.213068962 CEST	49740	443	192.168.2.4	184.28.90.27
Oct 25, 2024 08:20:53.255363941 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 25, 2024 08:20:53.456789017 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 25, 2024 08:20:53.456940889 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 25, 2024 08:20:53.457004070 CEST	49740	443	192.168.2.4	184.28.90.27
Oct 25, 2024 08:20:53.457053900 CEST	49740	443	192.168.2.4	184.28.90.27
Oct 25, 2024 08:20:53.457053900 CEST	49740	443	192.168.2.4	184.28.90.27
Oct 25, 2024 08:20:53.457077980 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 25, 2024 08:20:53.457091093 CEST	443	49740	184.28.90.27	192.168.2.4
Oct 25, 2024 08:20:53.488445044 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 25, 2024 08:20:53.488531113 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 25, 2024 08:20:53.488636017 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 25, 2024 08:20:53.488972902 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 25, 2024 08:20:53.489054918 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 25, 2024 08:20:54.331346989 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 25, 2024 08:20:54.331657887 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 25, 2024 08:20:54.333271980 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 25, 2024 08:20:54.333328009 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 25, 2024 08:20:54.333861113 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 25, 2024 08:20:54.335390091 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 25, 2024 08:20:54.379364967 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 25, 2024 08:20:54.577976942 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 25, 2024 08:20:54.578164101 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 25, 2024 08:20:54.578474045 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 25, 2024 08:20:54.579422951 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 25, 2024 08:20:54.579423904 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 25, 2024 08:20:54.579490900 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 25, 2024 08:20:54.579526901 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 25, 2024 08:20:59.797771931 CEST	49672	443	192.168.2.4	173.222.162.32
Oct 25, 2024 08:20:59.797810078 CEST	443	49672	173.222.162.32	192.168.2.4
Oct 25, 2024 08:21:01.302774906 CEST	49742	443	192.168.2.4	4.175.87.197
Oct 25, 2024 08:21:01.302860022 CEST	443	49742	4.175.87.197	192.168.2.4
Oct 25, 2024 08:21:01.303133011 CEST	49742	443	192.168.2.4	4.175.87.197
Oct 25, 2024 08:21:01.304629087 CEST	49742	443	192.168.2.4	4.175.87.197
Oct 25, 2024 08:21:01.304706097 CEST	443	49742	4.175.87.197	192.168.2.4
Oct 25, 2024 08:21:02.529658079 CEST	443	49742	4.175.87.197	192.168.2.4
Oct 25, 2024 08:21:02.530154943 CEST	49742	443	192.168.2.4	4.175.87.197
Oct 25, 2024 08:21:02.532445908 CEST	49742	443	192.168.2.4	4.175.87.197
Oct 25, 2024 08:21:02.532497883 CEST	443	49742	4.175.87.197	192.168.2.4
Oct 25, 2024 08:21:02.533051014 CEST	443	49742	4.175.87.197	192.168.2.4
Oct 25, 2024 08:21:02.577764988 CEST	49742	443	192.168.2.4	4.175.87.197
Oct 25, 2024 08:21:02.663184881 CEST	443	49739	172.217.16.196	192.168.2.4
Oct 25, 2024 08:21:02.663347960 CEST	443	49739	172.217.16.196	192.168.2.4
Oct 25, 2024 08:21:02.663475990 CEST	49739	443	192.168.2.4	172.217.16.196
Oct 25, 2024 08:21:03.454876900 CEST	49742	443	192.168.2.4	4.175.87.197
Oct 25, 2024 08:21:03.461716890 CEST	49723	80	192.168.2.4	199.232.210.172
Oct 25, 2024 08:21:03.467449903 CEST	80	49723	199.232.210.172	192.168.2.4
Oct 25, 2024 08:21:03.467905045 CEST	49723	80	192.168.2.4	199.232.210.172
Oct 25, 2024 08:21:03.495407104 CEST	443	49742	4.175.87.197	192.168.2.4
Oct 25, 2024 08:21:03.827709913 CEST	443	49742	4.175.87.197	192.168.2.4
Oct 25, 2024 08:21:03.827780008 CEST	443	49742	4.175.87.197	192.168.2.4
Oct 25, 2024 08:21:03.827800989 CEST	443	49742	4.175.87.197	192.168.2.4
Oct 25, 2024 08:21:03.827838898 CEST	443	49742	4.175.87.197	192.168.2.4
Oct 25, 2024 08:21:03.827912092 CEST	443	49742	4.175.87.197	192.168.2.4
Oct 25, 2024 08:21:03.828064919 CEST	49742	443	192.168.2.4	4.175.87.197
Oct 25, 2024 08:21:03.828064919 CEST	49742	443	192.168.2.4	4.175.87.197
Oct 25, 2024 08:21:03.828066111 CEST	49742	443	192.168.2.4	4.175.87.197
Oct 25, 2024 08:21:03.828130007 CEST	443	49742	4.175.87.197	192.168.2.4
Oct 25, 2024 08:21:03.828198910 CEST	49742	443	192.168.2.4	4.175.87.197
Oct 25, 2024 08:21:03.828243971 CEST	443	49742	4.175.87.197	192.168.2.4
Oct 25, 2024 08:21:03.828309059 CEST	49742	443	192.168.2.4	4.175.87.197
Oct 25, 2024 08:21:03.828322887 CEST	443	49742	4.175.87.197	192.168.2.4
Oct 25, 2024 08:21:03.874501944 CEST	49742	443	192.168.2.4	4.175.87.197
Oct 25, 2024 08:21:03.951750994 CEST	443	49742	4.175.87.197	192.168.2.4
Oct 25, 2024 08:21:03.951877117 CEST	443	49742	4.175.87.197	192.168.2.4
Oct 25, 2024 08:21:03.952049017 CEST	49742	443	192.168.2.4	4.175.87.197
Oct 25, 2024 08:21:04.048155069 CEST	49739	443	192.168.2.4	172.217.16.196
Oct 25, 2024 08:21:04.048177004 CEST	443	49739	172.217.16.196	192.168.2.4
Oct 25, 2024 08:21:04.693857908 CEST	49742	443	192.168.2.4	4.175.87.197
Oct 25, 2024 08:21:04.693857908 CEST	49742	443	192.168.2.4	4.175.87.197
Oct 25, 2024 08:21:04.693922043 CEST	443	49742	4.175.87.197	192.168.2.4
Oct 25, 2024 08:21:04.693939924 CEST	443	49742	4.175.87.197	192.168.2.4
Oct 25, 2024 08:21:29.320843935 CEST	58127	53	192.168.2.4	1.1.1.1
Oct 25, 2024 08:21:29.326344013 CEST	53	58127	1.1.1.1	192.168.2.4
Oct 25, 2024 08:21:29.326435089 CEST	58127	53	192.168.2.4	1.1.1.1
Oct 25, 2024 08:21:29.326709032 CEST	58127	53	192.168.2.4	1.1.1.1
Oct 25, 2024 08:21:29.332036972 CEST	53	58127	1.1.1.1	192.168.2.4
Oct 25, 2024 08:21:29.924501896 CEST	53	58127	1.1.1.1	192.168.2.4
Oct 25, 2024 08:21:29.928703070 CEST	58127	53	192.168.2.4	1.1.1.1
Oct 25, 2024 08:21:29.934477091 CEST	53	58127	1.1.1.1	192.168.2.4
Oct 25, 2024 08:21:29.934559107 CEST	58127	53	192.168.2.4	1.1.1.1
Oct 25, 2024 08:21:33.824826956 CEST	58129	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:33.824918032 CEST	443	58129	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:33.825277090 CEST	58129	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:33.825869083 CEST	58129	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:33.825908899 CEST	443	58129	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:34.546523094 CEST	49735	80	192.168.2.4	152.199.19.160
Oct 25, 2024 08:21:34.552037001 CEST	80	49735	152.199.19.160	192.168.2.4
Oct 25, 2024 08:21:34.569711924 CEST	443	58129	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:34.569808960 CEST	58129	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:34.573775053 CEST	58129	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:34.573827028 CEST	443	58129	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:34.574244976 CEST	443	58129	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:34.582811117 CEST	58129	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:34.623356104 CEST	443	58129	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:34.801172972 CEST	443	58129	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:34.801227093 CEST	443	58129	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:34.801419973 CEST	443	58129	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:34.801467896 CEST	58129	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:34.801537991 CEST	443	58129	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:34.801584005 CEST	58129	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:34.801642895 CEST	58129	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:34.918019056 CEST	443	58129	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:34.918078899 CEST	443	58129	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:34.918253899 CEST	58129	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:34.918253899 CEST	58129	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:34.918318987 CEST	443	58129	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:34.918394089 CEST	58129	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:34.987500906 CEST	443	58129	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:34.987576008 CEST	443	58129	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:34.987601995 CEST	58129	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:34.987673044 CEST	443	58129	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:34.987709999 CEST	58129	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:34.987732887 CEST	58129	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:35.062046051 CEST	443	58129	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:35.062108040 CEST	443	58129	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:35.062249899 CEST	58129	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:35.062249899 CEST	58129	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:35.062314034 CEST	443	58129	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:35.062367916 CEST	58129	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:35.178648949 CEST	443	58129	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:35.178678036 CEST	443	58129	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:35.178730011 CEST	58129	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:35.178797007 CEST	443	58129	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:35.178857088 CEST	58129	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:35.178857088 CEST	58129	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:35.294804096 CEST	443	58129	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:35.294855118 CEST	443	58129	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:35.294898033 CEST	58129	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:35.294965982 CEST	443	58129	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:35.295003891 CEST	58129	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:35.295027971 CEST	58129	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:35.385938883 CEST	443	58129	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:35.385984898 CEST	443	58129	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:35.386030912 CEST	58129	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:35.386096954 CEST	443	58129	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:35.386137009 CEST	58129	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:35.386159897 CEST	58129	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:35.413022995 CEST	443	58129	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:35.413067102 CEST	443	58129	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:35.413119078 CEST	58129	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:35.413184881 CEST	443	58129	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:35.413225889 CEST	58129	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:35.413250923 CEST	58129	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:35.624512911 CEST	49736	80	192.168.2.4	152.199.19.160
Oct 25, 2024 08:21:35.650052071 CEST	443	58129	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:35.650074959 CEST	443	58129	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:35.650258064 CEST	443	58129	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:35.650413990 CEST	58129	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:35.650480986 CEST	443	58129	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:35.650507927 CEST	80	49736	152.199.19.160	192.168.2.4
Oct 25, 2024 08:21:35.650530100 CEST	58129	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:35.650546074 CEST	443	58129	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:35.650598049 CEST	58129	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:35.650616884 CEST	443	58129	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:35.650681019 CEST	58129	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:35.650695086 CEST	443	58129	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:35.650732040 CEST	58129	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:35.704910994 CEST	58129	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:35.763155937 CEST	443	58129	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:35.763227940 CEST	443	58129	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:35.763283968 CEST	58129	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:35.763369083 CEST	443	58129	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:35.763413906 CEST	58129	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:35.763747931 CEST	58129	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:35.853830099 CEST	443	58129	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:35.853902102 CEST	443	58129	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:35.854080915 CEST	58129	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:35.854080915 CEST	58129	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:35.854144096 CEST	443	58129	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:35.854403019 CEST	58129	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:35.879935026 CEST	443	58129	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:35.880089998 CEST	443	58129	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:35.880206108 CEST	58129	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:35.880207062 CEST	58129	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:35.880207062 CEST	58129	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:35.880300999 CEST	443	58129	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:35.880342960 CEST	58129	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:35.880359888 CEST	443	58129	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:35.927362919 CEST	58131	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:35.927444935 CEST	443	58131	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:35.927443981 CEST	58130	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:35.927529097 CEST	443	58130	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:35.927695990 CEST	58130	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:35.927809000 CEST	58131	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:35.927939892 CEST	58131	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:35.927977085 CEST	443	58131	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:35.928031921 CEST	58130	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:35.928067923 CEST	443	58130	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:35.929554939 CEST	58132	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:35.929595947 CEST	443	58132	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:35.929892063 CEST	58132	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:35.930242062 CEST	58132	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:35.930263042 CEST	443	58132	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:35.930805922 CEST	58133	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:35.930888891 CEST	443	58133	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:35.931169987 CEST	58133	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:35.931338072 CEST	58134	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:35.931349993 CEST	443	58134	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:35.931369066 CEST	58133	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:35.931406975 CEST	443	58133	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:35.931559086 CEST	58134	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:35.931834936 CEST	58134	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:35.931850910 CEST	443	58134	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:37.547480106 CEST	443	58133	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:37.548083067 CEST	58133	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:37.548151016 CEST	443	58133	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:37.548641920 CEST	58133	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:37.548695087 CEST	443	58133	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:37.550729036 CEST	443	58134	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:37.551075935 CEST	58134	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:37.551104069 CEST	443	58134	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:37.551527977 CEST	58134	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:37.551534891 CEST	443	58134	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:37.552658081 CEST	443	58132	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:37.552944899 CEST	58132	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:37.552959919 CEST	443	58132	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:37.553378105 CEST	58132	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:37.553384066 CEST	443	58132	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:37.555022955 CEST	443	58131	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:37.555413961 CEST	58131	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:37.555497885 CEST	443	58131	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:37.555655956 CEST	58131	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:37.555670977 CEST	443	58131	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:37.557740927 CEST	443	58130	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:37.558033943 CEST	58130	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:37.558056116 CEST	443	58130	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:37.558370113 CEST	58130	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:37.558377981 CEST	443	58130	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:37.673779964 CEST	443	58133	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:37.673918009 CEST	443	58133	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:37.674209118 CEST	58133	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:37.674210072 CEST	58133	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:37.674210072 CEST	58133	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:37.676312923 CEST	58135	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:37.676407099 CEST	443	58135	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:37.676594973 CEST	58135	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:37.676673889 CEST	58135	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:37.676696062 CEST	443	58135	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:37.679672003 CEST	443	58134	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:37.679719925 CEST	443	58134	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:37.679855108 CEST	443	58134	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:37.679924011 CEST	58134	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:37.679958105 CEST	58134	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:37.679958105 CEST	58134	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:37.680006027 CEST	58134	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:37.680025101 CEST	443	58134	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:37.681807041 CEST	58136	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:37.681849003 CEST	443	58136	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:37.681998968 CEST	58136	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:37.681998968 CEST	58136	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:37.682029963 CEST	443	58136	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:37.685472965 CEST	443	58132	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:37.685528040 CEST	443	58132	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:37.685668945 CEST	443	58132	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:37.685693979 CEST	58132	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:37.685765982 CEST	58132	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:37.685765982 CEST	58132	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:37.685904026 CEST	58132	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:37.685909986 CEST	443	58132	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:37.687592983 CEST	58137	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:37.687684059 CEST	443	58137	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:37.687856913 CEST	58137	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:37.687856913 CEST	58137	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:37.687937975 CEST	443	58137	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:37.694590092 CEST	443	58130	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:37.694619894 CEST	443	58130	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:37.694756985 CEST	443	58130	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:37.694804907 CEST	58130	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:37.694870949 CEST	58130	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:37.694871902 CEST	58130	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:37.694871902 CEST	58130	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:37.696605921 CEST	58138	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:37.696635008 CEST	443	58138	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:37.696923971 CEST	58138	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:37.696923971 CEST	58138	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:37.696949005 CEST	443	58138	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:37.698237896 CEST	443	58131	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:37.698484898 CEST	443	58131	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:37.698616028 CEST	58131	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:37.698616028 CEST	58131	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:37.698616028 CEST	58131	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:37.700284004 CEST	58139	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:37.700366020 CEST	443	58139	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:37.700645924 CEST	58139	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:37.700645924 CEST	58139	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:37.700763941 CEST	443	58139	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:37.984019041 CEST	58133	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:37.984088898 CEST	443	58133	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:37.999526024 CEST	58130	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:37.999589920 CEST	443	58130	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:37.999772072 CEST	58131	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:37.999838114 CEST	443	58131	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:38.425147057 CEST	443	58135	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:38.425791979 CEST	58135	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:38.425860882 CEST	443	58135	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:38.426342964 CEST	58135	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:38.426403046 CEST	443	58135	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:38.426960945 CEST	443	58137	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:38.427371979 CEST	58137	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:38.427479982 CEST	443	58137	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:38.427720070 CEST	58137	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:38.427735090 CEST	443	58137	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:38.442679882 CEST	443	58139	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:38.443425894 CEST	58139	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:38.443425894 CEST	58139	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:38.443487883 CEST	443	58139	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:38.443523884 CEST	443	58139	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:38.443896055 CEST	443	58138	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:38.444639921 CEST	58138	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:38.444655895 CEST	443	58138	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:38.444679976 CEST	58138	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:38.444686890 CEST	443	58138	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:38.478514910 CEST	443	58136	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:38.479185104 CEST	58136	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:38.479185104 CEST	58136	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:38.479212046 CEST	443	58136	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:38.479226112 CEST	443	58136	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:38.556514978 CEST	443	58137	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:38.556675911 CEST	443	58137	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:38.556775093 CEST	58137	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:38.556900024 CEST	58137	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:38.556900024 CEST	58137	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:38.556953907 CEST	443	58137	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:38.556982040 CEST	443	58137	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:38.557172060 CEST	443	58135	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:38.557513952 CEST	443	58135	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:38.557662964 CEST	58135	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:38.557754040 CEST	58135	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:38.557754040 CEST	58135	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:38.557811975 CEST	443	58135	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:38.557842016 CEST	443	58135	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:38.559670925 CEST	58140	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:38.559736013 CEST	443	58140	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:38.559775114 CEST	58141	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:38.559868097 CEST	443	58141	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:38.559931993 CEST	58140	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:38.559931993 CEST	58140	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:38.559953928 CEST	58141	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:38.560004950 CEST	443	58140	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:38.560180902 CEST	58141	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:38.560223103 CEST	443	58141	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:38.571962118 CEST	443	58139	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:38.572149992 CEST	443	58139	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:38.572288036 CEST	58139	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:38.572320938 CEST	58139	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:38.572340965 CEST	443	58139	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:38.572365999 CEST	58139	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:38.572380066 CEST	443	58139	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:38.574347019 CEST	58142	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:38.574393034 CEST	443	58142	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:38.574462891 CEST	58142	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:38.574579000 CEST	58142	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:38.574594021 CEST	443	58142	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:38.575295925 CEST	443	58138	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:38.575448036 CEST	443	58138	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:38.575601101 CEST	58138	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:38.575639009 CEST	58138	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:38.575656891 CEST	443	58138	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:38.575668097 CEST	58138	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:38.575674057 CEST	443	58138	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:38.577445984 CEST	58143	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:38.577471018 CEST	443	58143	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:38.577537060 CEST	58143	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:38.577733040 CEST	58143	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:38.577763081 CEST	443	58143	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:38.608155966 CEST	443	58136	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:38.608419895 CEST	443	58136	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:38.608470917 CEST	58136	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:38.608515024 CEST	58136	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:38.608530998 CEST	443	58136	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:38.608542919 CEST	58136	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:38.608555079 CEST	443	58136	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:38.610502958 CEST	58144	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:38.610578060 CEST	443	58144	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:38.610680103 CEST	58144	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:38.610824108 CEST	58144	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:38.610857010 CEST	443	58144	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:39.300657034 CEST	443	58141	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:39.301215887 CEST	58141	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:39.301280022 CEST	443	58141	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:39.301309109 CEST	443	58140	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:39.301599979 CEST	58140	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:39.301618099 CEST	443	58140	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:39.301635027 CEST	58141	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:39.301668882 CEST	443	58141	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:39.302073956 CEST	58140	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:39.302081108 CEST	443	58140	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:39.313038111 CEST	443	58143	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:39.313163996 CEST	443	58142	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:39.313514948 CEST	58142	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:39.313546896 CEST	443	58142	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:39.313555002 CEST	58143	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:39.313572884 CEST	443	58143	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:39.313882113 CEST	58143	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:39.313891888 CEST	443	58143	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:39.314095020 CEST	58142	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:39.314105988 CEST	443	58142	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:39.382694960 CEST	443	58144	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:39.383032084 CEST	58144	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:39.383073092 CEST	443	58144	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:39.383363962 CEST	58144	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:39.383369923 CEST	443	58144	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:39.434071064 CEST	443	58141	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:39.442121983 CEST	443	58141	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:39.442184925 CEST	58141	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:39.442240953 CEST	58141	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:39.442240953 CEST	58141	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:39.442274094 CEST	443	58141	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:39.442296028 CEST	443	58141	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:39.443028927 CEST	443	58143	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:39.443223953 CEST	443	58143	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:39.443288088 CEST	58143	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:39.443342924 CEST	58143	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:39.443342924 CEST	58143	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:39.443356991 CEST	443	58143	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:39.443375111 CEST	443	58143	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:39.443881989 CEST	443	58142	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:39.444020033 CEST	443	58142	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:39.444154978 CEST	58142	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:39.444266081 CEST	58142	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:39.444267035 CEST	58142	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:39.444297075 CEST	443	58142	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:39.444320917 CEST	443	58142	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:39.445426941 CEST	58145	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:39.445488930 CEST	443	58145	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:39.445570946 CEST	58145	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:39.445861101 CEST	58145	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:39.445892096 CEST	443	58145	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:39.446521044 CEST	58146	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:39.446552038 CEST	443	58146	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:39.446624994 CEST	58146	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:39.446722984 CEST	58147	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:39.446742058 CEST	58146	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:39.446743965 CEST	443	58147	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:39.446754932 CEST	443	58146	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:39.446820021 CEST	58147	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:39.446870089 CEST	58147	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:39.446882963 CEST	443	58147	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:39.459925890 CEST	443	58140	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:39.460572958 CEST	443	58140	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:39.460725069 CEST	58140	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:39.460725069 CEST	58140	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:39.460776091 CEST	58140	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:39.460797071 CEST	443	58140	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:39.463602066 CEST	58148	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:39.463628054 CEST	443	58148	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:39.463722944 CEST	58148	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:39.463967085 CEST	58148	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:39.463984013 CEST	443	58148	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:39.518507957 CEST	443	58144	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:39.518579006 CEST	443	58144	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:39.518630028 CEST	58144	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:39.518770933 CEST	58144	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:39.518786907 CEST	443	58144	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:39.518801928 CEST	58144	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:39.518810034 CEST	443	58144	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:39.520747900 CEST	58149	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:39.520819902 CEST	443	58149	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:39.520900965 CEST	58149	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:39.521035910 CEST	58149	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:39.521071911 CEST	443	58149	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:40.181497097 CEST	443	58145	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:40.182024956 CEST	58145	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:40.182066917 CEST	443	58145	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:40.182504892 CEST	58145	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:40.182518959 CEST	443	58145	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:40.186278105 CEST	443	58146	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:40.186968088 CEST	58146	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:40.186968088 CEST	58146	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:40.187000990 CEST	443	58146	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:40.187015057 CEST	443	58146	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:40.192322016 CEST	443	58148	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:40.192758083 CEST	58148	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:40.192774057 CEST	443	58148	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:40.193001986 CEST	58148	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:40.193007946 CEST	443	58148	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:40.222800970 CEST	443	58147	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:40.223208904 CEST	58147	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:40.223268032 CEST	443	58147	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:40.223542929 CEST	58147	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:40.223557949 CEST	443	58147	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:40.255597115 CEST	443	58149	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:40.255912066 CEST	58149	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:40.255971909 CEST	443	58149	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:40.256232023 CEST	58149	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:40.256248951 CEST	443	58149	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:40.312513113 CEST	443	58145	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:40.312711000 CEST	443	58145	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:40.312937975 CEST	58145	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:40.312938929 CEST	58145	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:40.313508034 CEST	58145	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:40.313534021 CEST	443	58145	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:40.315340996 CEST	58150	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:40.315367937 CEST	443	58150	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:40.315560102 CEST	58150	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:40.315642118 CEST	58150	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:40.315651894 CEST	443	58150	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:40.321096897 CEST	443	58148	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:40.321270943 CEST	443	58148	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:40.321350098 CEST	58148	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:40.321350098 CEST	58148	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:40.321363926 CEST	58148	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:40.321369886 CEST	443	58148	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:40.323194981 CEST	58151	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:40.323254108 CEST	443	58151	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:40.323448896 CEST	58151	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:40.323448896 CEST	58151	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:40.323534012 CEST	443	58151	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:40.359899998 CEST	443	58147	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:40.360141993 CEST	443	58147	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:40.360253096 CEST	58147	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:40.360253096 CEST	58147	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:40.360577106 CEST	58147	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:40.360594988 CEST	443	58147	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:40.362588882 CEST	443	58146	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:40.362720013 CEST	443	58146	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:40.362747908 CEST	58152	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:40.362776041 CEST	443	58152	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:40.362807989 CEST	58146	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:40.362808943 CEST	58146	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:40.362849951 CEST	58146	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:40.362868071 CEST	443	58146	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:40.362905979 CEST	58152	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:40.363285065 CEST	58152	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:40.363297939 CEST	443	58152	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:40.364602089 CEST	58153	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:40.364684105 CEST	443	58153	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:40.364938021 CEST	58153	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:40.364938021 CEST	58153	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:40.365009069 CEST	443	58153	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:40.386456013 CEST	443	58149	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:40.386526108 CEST	443	58149	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:40.386642933 CEST	58149	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:40.386691093 CEST	58149	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:40.386691093 CEST	58149	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:40.386714935 CEST	443	58149	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:40.386735916 CEST	443	58149	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:40.388459921 CEST	58154	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:40.388492107 CEST	443	58154	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:40.388689041 CEST	58154	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:40.388689995 CEST	58154	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:40.388721943 CEST	443	58154	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:41.020486116 CEST	58155	443	192.168.2.4	4.175.87.197
Oct 25, 2024 08:21:41.020566940 CEST	443	58155	4.175.87.197	192.168.2.4
Oct 25, 2024 08:21:41.020642996 CEST	58155	443	192.168.2.4	4.175.87.197
Oct 25, 2024 08:21:41.020941973 CEST	58155	443	192.168.2.4	4.175.87.197
Oct 25, 2024 08:21:41.020994902 CEST	443	58155	4.175.87.197	192.168.2.4
Oct 25, 2024 08:21:41.048007011 CEST	443	58150	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:41.048376083 CEST	58150	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:41.048393011 CEST	443	58150	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:41.048778057 CEST	58150	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:41.048784018 CEST	443	58150	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:41.052069902 CEST	443	58151	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:41.052412987 CEST	58151	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:41.052472115 CEST	443	58151	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:41.052773952 CEST	58151	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:41.052789927 CEST	443	58151	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:41.088579893 CEST	443	58153	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:41.088896036 CEST	58153	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:41.088954926 CEST	443	58153	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:41.089253902 CEST	58153	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:41.089271069 CEST	443	58153	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:41.100611925 CEST	443	58152	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:41.101119995 CEST	58152	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:41.101133108 CEST	443	58152	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:41.101435900 CEST	58152	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:41.101442099 CEST	443	58152	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:41.136385918 CEST	443	58154	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:41.136806965 CEST	58154	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:41.136816025 CEST	443	58154	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:41.137145996 CEST	58154	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:41.137151003 CEST	443	58154	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:41.181442022 CEST	443	58150	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:41.181524038 CEST	443	58150	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:41.181615114 CEST	58150	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:41.182987928 CEST	443	58151	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:41.183079958 CEST	443	58151	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:41.183192015 CEST	58151	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:41.192079067 CEST	58150	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:41.192087889 CEST	443	58150	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:41.194658041 CEST	58151	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:41.194658041 CEST	58151	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:41.194691896 CEST	443	58151	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:41.194715977 CEST	443	58151	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:41.199965000 CEST	58156	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:41.200072050 CEST	443	58156	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:41.200136900 CEST	58156	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:41.202071905 CEST	58157	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:41.202110052 CEST	443	58157	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:41.202183008 CEST	58157	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:41.202578068 CEST	58156	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:41.202610016 CEST	443	58156	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:41.202831984 CEST	58157	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:41.202861071 CEST	443	58157	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:41.217041016 CEST	443	58153	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:41.217194080 CEST	443	58153	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:41.217363119 CEST	58153	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:41.217569113 CEST	58153	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:41.217602968 CEST	443	58153	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:41.217631102 CEST	58153	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:41.217645884 CEST	443	58153	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:41.222500086 CEST	58158	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:41.222524881 CEST	443	58158	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:41.222583055 CEST	58158	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:41.222832918 CEST	58158	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:41.222856998 CEST	443	58158	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:41.239772081 CEST	443	58152	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:41.240125895 CEST	443	58152	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:41.240185976 CEST	58152	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:41.240379095 CEST	58152	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:41.240395069 CEST	443	58152	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:41.240408897 CEST	58152	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:41.240415096 CEST	443	58152	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:41.245424986 CEST	58159	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:41.245448112 CEST	443	58159	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:41.245518923 CEST	58159	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:41.245636940 CEST	58159	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:41.245661974 CEST	443	58159	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:41.270236015 CEST	443	58154	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:41.270313025 CEST	443	58154	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:41.270401955 CEST	58154	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:41.270663023 CEST	58154	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:41.270670891 CEST	443	58154	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:41.274802923 CEST	58160	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:41.274846077 CEST	443	58160	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:41.274934053 CEST	58160	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:41.275171995 CEST	58160	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:41.275203943 CEST	443	58160	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:41.946861029 CEST	443	58156	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:41.947415113 CEST	58156	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:41.947438002 CEST	443	58156	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:41.948153973 CEST	58156	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:41.948163986 CEST	443	58156	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:41.949498892 CEST	443	58157	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:41.949877977 CEST	58157	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:41.949939013 CEST	443	58157	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:41.950748920 CEST	58157	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:41.950768948 CEST	443	58157	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:41.969402075 CEST	443	58158	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:41.969749928 CEST	58158	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:41.969804049 CEST	443	58158	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:41.970132113 CEST	58158	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:41.970144033 CEST	443	58158	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:41.980967045 CEST	443	58159	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:41.981281042 CEST	58159	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:41.981353998 CEST	443	58159	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:41.981630087 CEST	58159	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:41.981643915 CEST	443	58159	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.002053022 CEST	443	58160	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.002501965 CEST	58160	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.002585888 CEST	443	58160	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.002732038 CEST	58160	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.002746105 CEST	443	58160	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.080677032 CEST	443	58156	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.080840111 CEST	443	58156	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.081028938 CEST	58156	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.081106901 CEST	58156	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.081106901 CEST	58156	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.081151009 CEST	443	58156	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.081177950 CEST	443	58156	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.082178116 CEST	443	58157	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.082284927 CEST	443	58157	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.082444906 CEST	58157	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.082602978 CEST	58157	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.082602978 CEST	58157	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.082645893 CEST	443	58157	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.082673073 CEST	443	58157	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.083239079 CEST	58161	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.083265066 CEST	443	58161	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.083389997 CEST	58161	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.083534956 CEST	58161	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.083554983 CEST	443	58161	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.084276915 CEST	58162	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.084358931 CEST	443	58162	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.084427118 CEST	58162	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.084558010 CEST	58162	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.084594965 CEST	443	58162	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.101234913 CEST	443	58158	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.101732016 CEST	443	58158	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.101844072 CEST	58158	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.101882935 CEST	58158	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.101882935 CEST	58158	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.101902962 CEST	443	58158	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.101922989 CEST	443	58158	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.103782892 CEST	58163	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.103801966 CEST	443	58163	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.103857994 CEST	58163	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.103981018 CEST	58163	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.103993893 CEST	443	58163	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.109524012 CEST	443	58159	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.109669924 CEST	443	58159	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.109745026 CEST	58159	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.109745026 CEST	58159	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.109819889 CEST	58159	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.109855890 CEST	443	58159	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.111527920 CEST	58164	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.111571074 CEST	443	58164	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.111677885 CEST	58164	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.111788034 CEST	58164	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.111807108 CEST	443	58164	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.133276939 CEST	443	58155	4.175.87.197	192.168.2.4
Oct 25, 2024 08:21:42.133460045 CEST	58155	443	192.168.2.4	4.175.87.197
Oct 25, 2024 08:21:42.134751081 CEST	58155	443	192.168.2.4	4.175.87.197
Oct 25, 2024 08:21:42.134834051 CEST	443	58155	4.175.87.197	192.168.2.4
Oct 25, 2024 08:21:42.135251045 CEST	443	58155	4.175.87.197	192.168.2.4
Oct 25, 2024 08:21:42.140218019 CEST	443	58160	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.140280008 CEST	443	58160	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.140340090 CEST	58160	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.140476942 CEST	58160	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.140476942 CEST	58160	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.140517950 CEST	443	58160	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.140543938 CEST	443	58160	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.142515898 CEST	58165	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.142564058 CEST	443	58165	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.142791033 CEST	58165	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.142923117 CEST	58155	443	192.168.2.4	4.175.87.197
Oct 25, 2024 08:21:42.142987013 CEST	58165	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.143011093 CEST	443	58165	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.183406115 CEST	443	58155	4.175.87.197	192.168.2.4
Oct 25, 2024 08:21:42.515156031 CEST	443	58155	4.175.87.197	192.168.2.4
Oct 25, 2024 08:21:42.515223026 CEST	443	58155	4.175.87.197	192.168.2.4
Oct 25, 2024 08:21:42.515269041 CEST	443	58155	4.175.87.197	192.168.2.4
Oct 25, 2024 08:21:42.515300989 CEST	58155	443	192.168.2.4	4.175.87.197
Oct 25, 2024 08:21:42.515383005 CEST	443	58155	4.175.87.197	192.168.2.4
Oct 25, 2024 08:21:42.515435934 CEST	58155	443	192.168.2.4	4.175.87.197
Oct 25, 2024 08:21:42.515436888 CEST	58155	443	192.168.2.4	4.175.87.197
Oct 25, 2024 08:21:42.625026941 CEST	443	58155	4.175.87.197	192.168.2.4
Oct 25, 2024 08:21:42.625098944 CEST	443	58155	4.175.87.197	192.168.2.4
Oct 25, 2024 08:21:42.625278950 CEST	58155	443	192.168.2.4	4.175.87.197
Oct 25, 2024 08:21:42.625278950 CEST	58155	443	192.168.2.4	4.175.87.197
Oct 25, 2024 08:21:42.625340939 CEST	443	58155	4.175.87.197	192.168.2.4
Oct 25, 2024 08:21:42.625689030 CEST	58155	443	192.168.2.4	4.175.87.197
Oct 25, 2024 08:21:42.625689030 CEST	58155	443	192.168.2.4	4.175.87.197
Oct 25, 2024 08:21:42.625778913 CEST	443	58155	4.175.87.197	192.168.2.4
Oct 25, 2024 08:21:42.626327038 CEST	443	58155	4.175.87.197	192.168.2.4
Oct 25, 2024 08:21:42.626413107 CEST	443	58155	4.175.87.197	192.168.2.4
Oct 25, 2024 08:21:42.626477957 CEST	58155	443	192.168.2.4	4.175.87.197
Oct 25, 2024 08:21:42.805609941 CEST	443	58161	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.806742907 CEST	58161	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.806759119 CEST	443	58161	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.807152987 CEST	58161	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.807161093 CEST	443	58161	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.826059103 CEST	443	58162	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.827377081 CEST	58162	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.827455044 CEST	443	58162	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.828610897 CEST	58162	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.828629017 CEST	443	58162	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.834146023 CEST	443	58163	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.835674047 CEST	58163	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.835700035 CEST	443	58163	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.836152077 CEST	58163	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.836157084 CEST	443	58163	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.887774944 CEST	443	58165	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.888379097 CEST	58165	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.888448954 CEST	443	58165	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.889102936 CEST	58165	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.889116049 CEST	443	58165	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.933919907 CEST	443	58161	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.934055090 CEST	443	58161	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.934536934 CEST	58161	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.934536934 CEST	58161	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.934626102 CEST	58161	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.934649944 CEST	443	58161	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.939521074 CEST	58166	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.939603090 CEST	443	58166	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.939675093 CEST	58166	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.939872980 CEST	58166	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.939909935 CEST	443	58166	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.962035894 CEST	443	58162	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.962178946 CEST	443	58162	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.962323904 CEST	443	58163	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.962349892 CEST	58162	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.962433100 CEST	58162	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.962475061 CEST	443	58162	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.962544918 CEST	443	58163	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.962547064 CEST	58162	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.962563992 CEST	443	58162	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.962611914 CEST	58163	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.963016033 CEST	58163	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.963028908 CEST	443	58163	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.963041067 CEST	58163	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.963047981 CEST	443	58163	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.968766928 CEST	58167	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.968827963 CEST	443	58167	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.968894005 CEST	58167	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.969388962 CEST	58168	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.969470024 CEST	443	58168	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.969563961 CEST	58168	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.969727993 CEST	58168	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.969759941 CEST	443	58168	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:42.969955921 CEST	58167	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:42.969979048 CEST	443	58167	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:43.024180889 CEST	443	58165	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:43.024240017 CEST	443	58165	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:43.024302006 CEST	58165	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:43.024419069 CEST	58165	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:43.024440050 CEST	443	58165	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:43.029258966 CEST	58169	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:43.029301882 CEST	443	58169	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:43.029412985 CEST	58169	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:43.029705048 CEST	58169	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:43.029721975 CEST	443	58169	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:43.657075882 CEST	443	58166	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:43.657632113 CEST	58166	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:43.657694101 CEST	443	58166	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:43.658107996 CEST	58166	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:43.658160925 CEST	443	58166	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:43.708671093 CEST	443	58168	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:43.709232092 CEST	58168	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:43.709289074 CEST	443	58168	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:43.709638119 CEST	58168	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:43.709687948 CEST	443	58168	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:43.714458942 CEST	443	58167	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:43.714766026 CEST	58167	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:43.714834929 CEST	443	58167	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:43.715070963 CEST	58167	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:43.715085030 CEST	443	58167	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:43.760665894 CEST	443	58169	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:43.763751030 CEST	58169	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:43.763786077 CEST	443	58169	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:43.764381886 CEST	58169	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:43.764388084 CEST	443	58169	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:43.784516096 CEST	443	58166	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:43.784678936 CEST	443	58166	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:43.784852982 CEST	58166	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:43.796397924 CEST	58166	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:43.796468019 CEST	443	58166	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:43.796505928 CEST	58166	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:43.796524048 CEST	443	58166	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:43.802969933 CEST	58170	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:43.803052902 CEST	443	58170	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:43.803286076 CEST	58170	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:43.803762913 CEST	58170	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:43.803803921 CEST	443	58170	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:43.838175058 CEST	443	58168	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:43.838334084 CEST	443	58168	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:43.838522911 CEST	58168	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:43.839571953 CEST	58168	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:43.839571953 CEST	58168	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:43.839613914 CEST	443	58168	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:43.839643002 CEST	443	58168	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:43.848650932 CEST	443	58167	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:43.849478006 CEST	443	58167	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:43.849549055 CEST	58167	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:43.856684923 CEST	58167	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:43.856720924 CEST	443	58167	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:43.864798069 CEST	58171	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:43.864831924 CEST	443	58171	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:43.865048885 CEST	58171	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:43.867392063 CEST	58172	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:43.867474079 CEST	443	58172	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:43.867487907 CEST	58171	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:43.867502928 CEST	443	58171	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:43.867561102 CEST	58172	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:43.868365049 CEST	58172	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:43.868438005 CEST	443	58172	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:43.894673109 CEST	443	58169	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:43.894736052 CEST	443	58169	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:43.894781113 CEST	58169	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:43.894972086 CEST	58169	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:43.894983053 CEST	443	58169	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:43.898699999 CEST	58173	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:43.898741007 CEST	443	58173	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:43.898827076 CEST	58173	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:43.899082899 CEST	58173	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:43.899102926 CEST	443	58173	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:44.537718058 CEST	443	58170	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:44.538518906 CEST	58170	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:44.538578033 CEST	443	58170	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:44.539253950 CEST	58170	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:44.539305925 CEST	443	58170	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:44.607952118 CEST	443	58171	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:44.608464956 CEST	58171	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:44.608504057 CEST	443	58171	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:44.609472990 CEST	58171	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:44.609482050 CEST	443	58171	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:44.613580942 CEST	443	58172	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:44.614176989 CEST	58172	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:44.614233971 CEST	443	58172	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:44.614830971 CEST	58172	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:44.614913940 CEST	443	58172	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:44.648183107 CEST	443	58173	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:44.648644924 CEST	58173	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:44.648673058 CEST	443	58173	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:44.649173021 CEST	58173	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:44.649180889 CEST	443	58173	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:44.665785074 CEST	443	58170	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:44.665931940 CEST	443	58170	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:44.666177034 CEST	58170	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:44.666266918 CEST	58170	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:44.666266918 CEST	58170	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:44.666309118 CEST	443	58170	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:44.666342020 CEST	443	58170	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:44.668683052 CEST	58174	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:44.668770075 CEST	443	58174	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:44.668951988 CEST	58174	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:44.669114113 CEST	58174	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:44.669136047 CEST	443	58174	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:44.670552015 CEST	443	58164	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:44.670959949 CEST	58164	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:44.671032906 CEST	443	58164	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:44.671586990 CEST	58164	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:44.671601057 CEST	443	58164	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:44.737235069 CEST	443	58171	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:44.737488985 CEST	443	58171	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:44.737533092 CEST	58171	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:44.737582922 CEST	58171	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:44.737601995 CEST	443	58171	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:44.737616062 CEST	58171	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:44.737621069 CEST	443	58171	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:44.739638090 CEST	58175	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:44.739684105 CEST	443	58175	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:44.739749908 CEST	58175	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:44.739861965 CEST	58175	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:44.739880085 CEST	443	58175	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:44.745189905 CEST	443	58172	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:44.745718956 CEST	443	58172	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:44.745784998 CEST	58172	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:44.745874882 CEST	58172	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:44.745876074 CEST	58172	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:44.745917082 CEST	443	58172	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:44.745949030 CEST	443	58172	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:44.747581005 CEST	58176	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:44.747591019 CEST	443	58176	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:44.747648954 CEST	58176	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:44.747776031 CEST	58176	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:44.747786045 CEST	443	58176	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:44.780488014 CEST	443	58173	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:44.780565977 CEST	443	58173	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:44.780656099 CEST	58173	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:44.780675888 CEST	58173	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:44.780685902 CEST	443	58173	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:44.780699015 CEST	58173	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:44.780704975 CEST	443	58173	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:44.782805920 CEST	58177	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:44.782886028 CEST	443	58177	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:44.783104897 CEST	58177	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:44.783246040 CEST	58177	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:44.783298016 CEST	443	58177	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:44.802052975 CEST	443	58164	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:44.802202940 CEST	443	58164	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:44.802304983 CEST	58164	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:44.802381992 CEST	58164	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:44.802381992 CEST	58164	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:44.802439928 CEST	443	58164	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:44.802465916 CEST	443	58164	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:44.804116011 CEST	58178	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:44.804126024 CEST	443	58178	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:44.804379940 CEST	58178	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:44.804496050 CEST	58178	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:44.804511070 CEST	443	58178	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:45.413125992 CEST	443	58174	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:45.413592100 CEST	58174	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:45.413650990 CEST	443	58174	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:45.413990021 CEST	58174	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:45.414002895 CEST	443	58174	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:45.489597082 CEST	443	58176	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:45.490003109 CEST	58176	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:45.490025043 CEST	443	58176	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:45.490444899 CEST	58176	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:45.490451097 CEST	443	58176	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:45.490926027 CEST	443	58175	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:45.491321087 CEST	58175	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:45.491333961 CEST	443	58175	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:45.491683006 CEST	58175	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:45.491688967 CEST	443	58175	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:45.516576052 CEST	443	58177	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:45.516901016 CEST	58177	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:45.516962051 CEST	443	58177	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:45.517283916 CEST	58177	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:45.517297029 CEST	443	58177	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:45.544828892 CEST	443	58174	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:45.545037985 CEST	443	58174	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:45.545094967 CEST	58174	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:45.545146942 CEST	58174	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:45.545146942 CEST	58174	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:45.545180082 CEST	443	58174	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:45.545203924 CEST	443	58174	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:45.547521114 CEST	58179	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:45.547564030 CEST	443	58179	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:45.547641993 CEST	58179	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:45.547744989 CEST	58179	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:45.547774076 CEST	443	58179	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:45.550694942 CEST	443	58178	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:45.551179886 CEST	58178	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:45.551186085 CEST	443	58178	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:45.551443100 CEST	58178	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:45.551446915 CEST	443	58178	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:45.619746923 CEST	443	58176	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:45.619891882 CEST	443	58176	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:45.620039940 CEST	58176	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:45.620039940 CEST	58176	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:45.620246887 CEST	58176	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:45.620254993 CEST	443	58176	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:45.621921062 CEST	58180	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:45.621957064 CEST	443	58180	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:45.622108936 CEST	58180	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:45.622108936 CEST	58180	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:45.622143030 CEST	443	58180	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:45.625305891 CEST	443	58175	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:45.625431061 CEST	443	58175	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:45.627047062 CEST	58175	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:45.627047062 CEST	58175	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:45.627326012 CEST	58175	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:45.627330065 CEST	443	58175	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:45.628701925 CEST	58181	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:45.628772020 CEST	443	58181	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:45.629009008 CEST	58181	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:45.629009008 CEST	58181	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:45.629087925 CEST	443	58181	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:45.647249937 CEST	443	58177	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:45.647558928 CEST	443	58177	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:45.647692919 CEST	58177	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:45.647692919 CEST	58177	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:45.648813963 CEST	58177	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:45.648833990 CEST	443	58177	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:45.649550915 CEST	58182	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:45.649565935 CEST	443	58182	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:45.649683952 CEST	58182	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:45.649770021 CEST	58182	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:45.649781942 CEST	443	58182	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:45.682260036 CEST	443	58178	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:45.683065891 CEST	443	58178	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:45.683173895 CEST	58178	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:45.683173895 CEST	58178	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:45.683269978 CEST	58178	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:45.683279037 CEST	443	58178	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:45.685029984 CEST	58183	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:45.685091019 CEST	443	58183	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:45.685267925 CEST	58183	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:45.685267925 CEST	58183	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:45.685340881 CEST	443	58183	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:46.500011921 CEST	443	58181	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:46.501344919 CEST	443	58179	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:46.501370907 CEST	58181	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:46.501372099 CEST	58181	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:46.501415968 CEST	443	58181	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:46.501456976 CEST	443	58181	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:46.502194881 CEST	58179	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:46.502194881 CEST	58179	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:46.502269030 CEST	443	58179	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:46.502305984 CEST	443	58179	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:46.504193068 CEST	443	58180	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:46.504462957 CEST	58180	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:46.504501104 CEST	443	58180	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:46.504784107 CEST	58180	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:46.504790068 CEST	443	58180	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:46.515393019 CEST	49724	80	192.168.2.4	199.232.210.172
Oct 25, 2024 08:21:46.520961046 CEST	80	49724	199.232.210.172	192.168.2.4
Oct 25, 2024 08:21:46.521127939 CEST	49724	80	192.168.2.4	199.232.210.172
Oct 25, 2024 08:21:46.621175051 CEST	443	58182	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:46.621514082 CEST	58182	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:46.621524096 CEST	443	58182	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:46.621840000 CEST	58182	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:46.621845007 CEST	443	58182	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:46.629964113 CEST	443	58183	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:46.630248070 CEST	58183	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:46.630280018 CEST	443	58183	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:46.630568027 CEST	58183	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:46.630582094 CEST	443	58183	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:46.632476091 CEST	443	58179	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:46.632505894 CEST	443	58181	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:46.632767916 CEST	443	58181	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:46.632780075 CEST	443	58179	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:46.632827997 CEST	58181	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:46.632838964 CEST	58179	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:46.632863998 CEST	58181	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:46.632878065 CEST	443	58181	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:46.632890940 CEST	58181	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:46.632896900 CEST	443	58181	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:46.632915974 CEST	58179	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:46.632915974 CEST	58179	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:46.632957935 CEST	443	58179	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:46.632983923 CEST	443	58179	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:46.633124113 CEST	443	58180	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:46.633723021 CEST	443	58180	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:46.633785963 CEST	58180	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:46.634138107 CEST	58180	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:46.634155989 CEST	443	58180	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:46.634167910 CEST	58180	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:46.634174109 CEST	443	58180	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:46.635751963 CEST	58184	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:46.635832071 CEST	443	58184	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:46.635905027 CEST	58184	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:46.636077881 CEST	58185	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:46.636158943 CEST	443	58185	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:46.636233091 CEST	58185	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:46.636334896 CEST	58186	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:46.636363983 CEST	443	58186	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:46.636388063 CEST	58184	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:46.636415958 CEST	443	58184	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:46.636441946 CEST	58186	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:46.636502981 CEST	58185	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:46.636523962 CEST	58186	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:46.636555910 CEST	443	58186	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:46.636571884 CEST	443	58185	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:46.751765013 CEST	443	58182	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:46.751928091 CEST	443	58182	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:46.751980066 CEST	58182	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:46.752057076 CEST	58182	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:46.752073050 CEST	443	58182	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:46.752083063 CEST	58182	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:46.752089024 CEST	443	58182	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:46.754774094 CEST	58187	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:46.754817009 CEST	443	58187	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:46.754893064 CEST	58187	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:46.755043030 CEST	58187	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:46.755072117 CEST	443	58187	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:46.759952068 CEST	443	58183	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:46.760309935 CEST	443	58183	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:46.760375023 CEST	58183	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:46.760427952 CEST	58183	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:46.760458946 CEST	443	58183	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:46.760484934 CEST	58183	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:46.760499954 CEST	443	58183	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:46.762253046 CEST	58188	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:46.762281895 CEST	443	58188	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:46.762471914 CEST	58188	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:46.762620926 CEST	58188	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:46.762634039 CEST	443	58188	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:47.369163990 CEST	443	58185	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:47.369575024 CEST	58185	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:47.369643927 CEST	443	58185	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:47.370028973 CEST	58185	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:47.370043039 CEST	443	58185	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:47.377284050 CEST	443	58184	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:47.378205061 CEST	58184	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:47.378258944 CEST	443	58184	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:47.378686905 CEST	58184	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:47.378700018 CEST	443	58184	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:47.388501883 CEST	443	58186	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:47.388814926 CEST	58186	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:47.388832092 CEST	443	58186	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:47.389146090 CEST	58186	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:47.389158010 CEST	443	58186	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:47.493412018 CEST	443	58187	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:47.493684053 CEST	58187	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:47.493706942 CEST	443	58187	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:47.494002104 CEST	58187	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:47.494013071 CEST	443	58187	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:47.498769045 CEST	443	58185	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:47.498950958 CEST	443	58185	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:47.499005079 CEST	58185	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:47.499056101 CEST	58185	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:47.499056101 CEST	58185	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:47.499088049 CEST	443	58185	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:47.499109983 CEST	443	58185	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:47.501537085 CEST	58190	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:47.501559019 CEST	443	58190	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:47.501673937 CEST	58190	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:47.501805067 CEST	58190	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:47.501811981 CEST	443	58190	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:47.511836052 CEST	443	58188	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:47.512188911 CEST	58188	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:47.512197971 CEST	443	58188	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:47.512537003 CEST	58188	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:47.512541056 CEST	443	58188	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:47.520927906 CEST	443	58186	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:47.521297932 CEST	443	58186	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:47.521368027 CEST	58186	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:47.521425962 CEST	58186	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:47.521425962 CEST	58186	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:47.521464109 CEST	443	58186	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:47.521486998 CEST	443	58186	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:47.523113966 CEST	58191	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:47.523195982 CEST	443	58191	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:47.523278952 CEST	58191	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:47.523385048 CEST	58191	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:47.523426056 CEST	443	58191	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:47.598242044 CEST	443	58184	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:47.599921942 CEST	443	58184	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:47.599988937 CEST	58184	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:47.600027084 CEST	58184	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:47.600027084 CEST	58184	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:47.600045919 CEST	443	58184	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:47.600070000 CEST	443	58184	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:47.601672888 CEST	58192	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:47.601721048 CEST	443	58192	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:47.601902008 CEST	58192	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:47.601902008 CEST	58192	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:47.601972103 CEST	443	58192	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:47.624337912 CEST	443	58187	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:47.624497890 CEST	443	58187	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:47.624602079 CEST	58187	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:47.624603033 CEST	58187	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:47.624732018 CEST	58187	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:47.624747992 CEST	443	58187	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:47.626215935 CEST	58193	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:47.626257896 CEST	443	58193	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:47.626502037 CEST	58193	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:47.626502037 CEST	58193	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:47.626550913 CEST	443	58193	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:47.643697977 CEST	443	58188	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:47.644021034 CEST	443	58188	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:47.644100904 CEST	58188	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:47.644100904 CEST	58188	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:47.644124985 CEST	58188	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:47.644134045 CEST	443	58188	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:47.645787954 CEST	58194	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:47.645817995 CEST	443	58194	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:47.645993948 CEST	58194	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:47.645993948 CEST	58194	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:47.646040916 CEST	443	58194	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:48.563270092 CEST	443	58190	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:48.563853025 CEST	58190	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:48.563870907 CEST	443	58190	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:48.565017939 CEST	443	58192	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:48.565052986 CEST	58190	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:48.565057993 CEST	443	58190	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:48.565525055 CEST	58192	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:48.565586090 CEST	443	58192	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:48.568850040 CEST	58192	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:48.568867922 CEST	443	58192	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:48.569885015 CEST	443	58191	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:48.570864916 CEST	58191	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:48.570864916 CEST	58191	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:48.570894957 CEST	443	58191	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:48.570940018 CEST	443	58191	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:48.691595078 CEST	443	58193	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:48.692264080 CEST	58193	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:48.692298889 CEST	443	58193	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:48.693444967 CEST	58193	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:48.693456888 CEST	443	58193	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:48.694994926 CEST	443	58190	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:48.695163965 CEST	443	58190	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:48.695211887 CEST	58190	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:48.695337057 CEST	58190	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:48.695348978 CEST	443	58190	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:48.695357084 CEST	58190	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:48.695362091 CEST	443	58190	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:48.696100950 CEST	443	58194	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:48.696723938 CEST	58194	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:48.696782112 CEST	443	58194	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:48.696924925 CEST	443	58192	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:48.697062969 CEST	443	58192	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:48.697109938 CEST	58192	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:48.697720051 CEST	58194	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:48.697732925 CEST	443	58194	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:48.699462891 CEST	58192	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:48.699497938 CEST	443	58192	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:48.699537992 CEST	58192	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:48.699553013 CEST	443	58192	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:48.703195095 CEST	443	58191	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:48.703567982 CEST	443	58191	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:48.703629017 CEST	58191	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:48.705595016 CEST	58195	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:48.705648899 CEST	443	58195	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:48.705712080 CEST	58195	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:48.707842112 CEST	58196	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:48.707907915 CEST	443	58196	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:48.707967997 CEST	58196	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:48.708272934 CEST	58196	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:48.708303928 CEST	443	58196	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:48.708528996 CEST	58191	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:48.708547115 CEST	443	58191	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:48.708595991 CEST	58191	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:48.708607912 CEST	443	58191	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:48.713211060 CEST	58197	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:48.713228941 CEST	443	58197	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:48.713278055 CEST	58197	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:48.713711977 CEST	58197	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:48.713722944 CEST	443	58197	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:48.714045048 CEST	58195	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:48.714066029 CEST	443	58195	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:48.824433088 CEST	443	58193	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:48.824537992 CEST	443	58193	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:48.824592113 CEST	58193	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:48.825287104 CEST	58193	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:48.825335979 CEST	443	58193	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:48.825417995 CEST	58193	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:48.825434923 CEST	443	58193	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:48.826354027 CEST	443	58194	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:48.826502085 CEST	443	58194	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:48.826622009 CEST	58194	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:48.830045938 CEST	58194	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:48.830045938 CEST	58194	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:48.830094099 CEST	443	58194	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:48.830120087 CEST	443	58194	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:48.834994078 CEST	58198	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:48.835033894 CEST	443	58198	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:48.835102081 CEST	58198	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:48.835922956 CEST	58198	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:48.835952997 CEST	443	58198	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:48.837570906 CEST	58199	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:48.837593079 CEST	443	58199	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:48.837637901 CEST	58199	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:48.837829113 CEST	58199	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:48.837836981 CEST	443	58199	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:49.436578035 CEST	443	58196	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:49.437227964 CEST	58196	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:49.437257051 CEST	443	58196	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:49.438002110 CEST	58196	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:49.438010931 CEST	443	58196	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:49.445569992 CEST	443	58197	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:49.445967913 CEST	58197	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:49.445979118 CEST	443	58197	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:49.446343899 CEST	58197	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:49.446347952 CEST	443	58197	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:49.449424028 CEST	443	58195	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:49.449763060 CEST	58195	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:49.449798107 CEST	443	58195	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:49.450089931 CEST	58195	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:49.450103998 CEST	443	58195	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:49.565696955 CEST	443	58196	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:49.565824986 CEST	443	58198	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:49.565869093 CEST	443	58196	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:49.565911055 CEST	58196	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:49.566179991 CEST	443	58199	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:49.566201925 CEST	58196	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:49.566215038 CEST	443	58196	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:49.566241026 CEST	58196	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:49.566247940 CEST	443	58196	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:49.568099976 CEST	58199	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:49.568119049 CEST	443	58199	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:49.568511963 CEST	58199	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:49.568523884 CEST	443	58199	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:49.568799019 CEST	58198	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:49.568808079 CEST	443	58198	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:49.569493055 CEST	58198	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:49.569498062 CEST	443	58198	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:49.571217060 CEST	58200	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:49.571296930 CEST	443	58200	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:49.571381092 CEST	58200	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:49.571527958 CEST	58200	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:49.571564913 CEST	443	58200	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:49.575480938 CEST	443	58197	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:49.575602055 CEST	443	58197	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:49.575722933 CEST	58197	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:49.575836897 CEST	58197	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:49.575836897 CEST	58197	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:49.575848103 CEST	443	58197	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:49.575855970 CEST	443	58197	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:49.579361916 CEST	58201	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:49.579385996 CEST	443	58201	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:49.579463959 CEST	58201	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:49.579643965 CEST	58201	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:49.579655886 CEST	443	58201	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:49.582345009 CEST	443	58195	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:49.582506895 CEST	443	58195	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:49.582755089 CEST	58195	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:49.582755089 CEST	58195	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:49.582811117 CEST	58195	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:49.582837105 CEST	443	58195	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:49.585488081 CEST	58202	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:49.585510015 CEST	443	58202	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:49.589468002 CEST	58202	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:49.589468956 CEST	58202	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:49.589524984 CEST	443	58202	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:49.694778919 CEST	443	58198	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:49.694998980 CEST	443	58198	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:49.695362091 CEST	58198	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:49.695363045 CEST	58198	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:49.695404053 CEST	58198	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:49.695420027 CEST	443	58198	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:49.697609901 CEST	443	58199	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:49.698046923 CEST	443	58199	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:49.701023102 CEST	58203	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:49.701050997 CEST	443	58203	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:49.701117992 CEST	58199	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:49.701257944 CEST	58203	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:49.701284885 CEST	58199	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:49.701284885 CEST	58199	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:49.701297045 CEST	443	58199	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:49.701304913 CEST	443	58199	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:49.702513933 CEST	58203	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:49.702528954 CEST	443	58203	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:49.705260992 CEST	58204	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:49.705358028 CEST	443	58204	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:49.705701113 CEST	58204	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:49.705991030 CEST	58204	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:49.706027031 CEST	443	58204	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:50.050312042 CEST	49735	80	192.168.2.4	152.199.19.160
Oct 25, 2024 08:21:50.056294918 CEST	80	49735	152.199.19.160	192.168.2.4
Oct 25, 2024 08:21:50.056581020 CEST	49735	80	192.168.2.4	152.199.19.160
Oct 25, 2024 08:21:50.465600014 CEST	443	58200	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:50.466609955 CEST	58200	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:50.466609955 CEST	58200	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:50.466643095 CEST	443	58200	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:50.466670036 CEST	443	58200	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:50.468735933 CEST	443	58202	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:50.469485998 CEST	58202	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:50.469485998 CEST	58202	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:50.469497919 CEST	443	58202	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:50.469517946 CEST	443	58202	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:50.471791029 CEST	443	58201	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:50.472521067 CEST	58201	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:50.472521067 CEST	58201	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:50.472544909 CEST	443	58201	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:50.472553015 CEST	443	58201	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:50.473906040 CEST	443	58203	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:50.474378109 CEST	443	58204	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:50.474888086 CEST	58203	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:50.474894047 CEST	443	58203	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:50.475378990 CEST	58203	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:50.475383043 CEST	443	58203	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:50.475387096 CEST	58204	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:50.475450993 CEST	443	58204	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:50.476006031 CEST	58204	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:50.476022005 CEST	443	58204	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:50.595194101 CEST	443	58202	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:50.595417023 CEST	443	58202	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:50.595520020 CEST	443	58200	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:50.595628023 CEST	58202	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:50.595628023 CEST	58202	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:50.595628023 CEST	58202	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:50.595679998 CEST	443	58200	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:50.595747948 CEST	58200	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:50.595861912 CEST	58200	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:50.595904112 CEST	443	58200	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:50.595936060 CEST	58200	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:50.595951080 CEST	443	58200	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:50.598306894 CEST	58205	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:50.598368883 CEST	58206	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:50.598396063 CEST	443	58205	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:50.598465919 CEST	443	58206	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:50.598481894 CEST	58205	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:50.598536968 CEST	58206	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:50.598625898 CEST	58205	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:50.598649979 CEST	443	58205	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:50.598697901 CEST	58206	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:50.598737001 CEST	443	58206	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:50.605616093 CEST	443	58201	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:50.605778933 CEST	443	58201	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:50.605837107 CEST	58201	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:50.605873108 CEST	58201	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:50.605884075 CEST	443	58201	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:50.605895042 CEST	58201	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:50.605901003 CEST	443	58201	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:50.607089996 CEST	443	58203	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:50.607239962 CEST	443	58203	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:50.607289076 CEST	58203	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:50.607353926 CEST	58203	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:50.607357025 CEST	443	58203	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:50.607367039 CEST	58203	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:50.607368946 CEST	443	58203	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:50.607682943 CEST	58207	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:50.607705116 CEST	443	58207	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:50.607764006 CEST	58207	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:50.607902050 CEST	58207	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:50.607925892 CEST	443	58207	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:50.608074903 CEST	443	58204	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:50.608151913 CEST	443	58204	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:50.608200073 CEST	58204	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:50.608290911 CEST	58204	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:50.608290911 CEST	58204	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:50.608314991 CEST	443	58204	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:50.608338118 CEST	443	58204	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:50.609728098 CEST	58208	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:50.609807968 CEST	443	58208	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:50.609891891 CEST	58208	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:50.609989882 CEST	58208	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:50.610013008 CEST	443	58208	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:50.610387087 CEST	58209	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:50.610445976 CEST	443	58209	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:50.610627890 CEST	58209	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:50.610749960 CEST	58209	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:50.610778093 CEST	443	58209	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:50.813060999 CEST	58202	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:50.813121080 CEST	443	58202	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:51.327940941 CEST	443	58206	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:51.330651999 CEST	58206	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:51.330718994 CEST	443	58206	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:51.331182957 CEST	58206	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:51.331202030 CEST	443	58206	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:51.332314968 CEST	443	58205	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:51.333565950 CEST	58205	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:51.333626032 CEST	443	58205	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:51.334089994 CEST	58205	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:51.334105015 CEST	443	58205	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:51.337923050 CEST	443	58208	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:51.345079899 CEST	58208	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:51.345096111 CEST	443	58208	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:51.345547915 CEST	443	58209	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:51.355650902 CEST	58208	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:51.355657101 CEST	443	58208	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:51.362365007 CEST	443	58207	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:51.362380028 CEST	58209	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:51.362436056 CEST	443	58209	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:51.362937927 CEST	58209	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:51.362952948 CEST	443	58209	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:51.363318920 CEST	58207	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:51.363379955 CEST	443	58207	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:51.363661051 CEST	58207	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:51.363676071 CEST	443	58207	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:51.457436085 CEST	443	58206	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:51.457540989 CEST	443	58206	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:51.457590103 CEST	58206	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:51.457911968 CEST	58206	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:51.457911968 CEST	58206	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:51.457938910 CEST	443	58206	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:51.457962990 CEST	443	58206	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:51.462584019 CEST	443	58205	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:51.463378906 CEST	443	58205	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:51.463445902 CEST	58205	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:51.463865995 CEST	58210	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:51.463886976 CEST	443	58210	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:51.463956118 CEST	58210	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:51.464121103 CEST	58205	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:51.464160919 CEST	443	58205	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:51.464194059 CEST	58205	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:51.464210987 CEST	443	58205	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:51.466362953 CEST	58210	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:51.466377020 CEST	443	58210	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:51.472610950 CEST	58211	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:51.472667933 CEST	443	58211	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:51.472733974 CEST	58211	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:51.473057985 CEST	58211	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:51.473087072 CEST	443	58211	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:51.479302883 CEST	443	58208	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:51.479471922 CEST	443	58208	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:51.479521036 CEST	58208	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:51.479624987 CEST	58208	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:51.479630947 CEST	443	58208	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:51.479659081 CEST	58208	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:51.479661942 CEST	443	58208	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:51.484211922 CEST	58212	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:51.484293938 CEST	443	58212	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:51.484359980 CEST	58212	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:51.484663010 CEST	58212	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:51.484700918 CEST	443	58212	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:51.495946884 CEST	443	58207	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:51.495997906 CEST	443	58207	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:51.496062994 CEST	58207	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:51.496087074 CEST	443	58207	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:51.496118069 CEST	443	58207	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:51.496171951 CEST	58207	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:51.496248007 CEST	58207	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:51.496248007 CEST	58207	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:51.496270895 CEST	443	58207	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:51.496289968 CEST	443	58207	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:51.496495008 CEST	443	58209	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:51.496840954 CEST	443	58209	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:51.496887922 CEST	58209	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:51.497407913 CEST	58209	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:51.497436047 CEST	443	58209	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:51.497462034 CEST	58209	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:51.497476101 CEST	443	58209	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:51.524427891 CEST	58213	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:51.524468899 CEST	443	58213	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:51.524522066 CEST	58213	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:51.526000977 CEST	58213	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:51.526015997 CEST	443	58213	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:51.529259920 CEST	58214	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:51.529289961 CEST	443	58214	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:51.529356956 CEST	58214	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:51.529634953 CEST	58214	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:51.529661894 CEST	443	58214	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:51.583302021 CEST	58215	443	192.168.2.4	172.217.16.196
Oct 25, 2024 08:21:51.583389044 CEST	443	58215	172.217.16.196	192.168.2.4
Oct 25, 2024 08:21:51.583460093 CEST	58215	443	192.168.2.4	172.217.16.196
Oct 25, 2024 08:21:51.583828926 CEST	58215	443	192.168.2.4	172.217.16.196
Oct 25, 2024 08:21:51.583867073 CEST	443	58215	172.217.16.196	192.168.2.4
Oct 25, 2024 08:21:52.206695080 CEST	443	58211	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:52.207748890 CEST	58211	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:52.207791090 CEST	443	58211	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:52.208975077 CEST	58211	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:52.208988905 CEST	443	58211	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:52.212977886 CEST	443	58210	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:52.213664055 CEST	58210	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:52.213664055 CEST	58210	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:52.213685989 CEST	443	58210	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:52.213706017 CEST	443	58210	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:52.234694004 CEST	443	58212	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:52.235225916 CEST	58212	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:52.235296011 CEST	443	58212	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:52.235850096 CEST	58212	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:52.235862017 CEST	443	58212	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:52.261703014 CEST	443	58213	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:52.262300014 CEST	58213	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:52.262300014 CEST	58213	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:52.262321949 CEST	443	58213	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:52.262332916 CEST	443	58213	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:52.264677048 CEST	443	58214	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:52.264995098 CEST	58214	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:52.265069962 CEST	443	58214	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:52.265348911 CEST	58214	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:52.265378952 CEST	443	58214	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:52.338026047 CEST	443	58211	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:52.338059902 CEST	443	58211	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:52.338243961 CEST	443	58211	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:52.338392019 CEST	58211	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:52.338392973 CEST	58211	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:52.338392973 CEST	58211	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:52.338392973 CEST	58211	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:52.340490103 CEST	58216	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:52.340570927 CEST	443	58216	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:52.340763092 CEST	58216	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:52.340763092 CEST	58216	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:52.340841055 CEST	443	58216	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:52.344970942 CEST	443	58210	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:52.345021963 CEST	443	58210	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:52.345140934 CEST	443	58210	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:52.345189095 CEST	58210	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:52.345264912 CEST	58210	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:52.345264912 CEST	58210	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:52.345392942 CEST	58210	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:52.345405102 CEST	443	58210	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:52.347090960 CEST	58217	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:52.347119093 CEST	443	58217	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:52.347498894 CEST	58217	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:52.347498894 CEST	58217	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:52.347522020 CEST	443	58217	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:52.368577003 CEST	443	58212	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:52.368637085 CEST	443	58212	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:52.368792057 CEST	58212	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:52.368813992 CEST	443	58212	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:52.368906975 CEST	58212	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:52.368907928 CEST	58212	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:52.368958950 CEST	58212	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:52.368995905 CEST	443	58212	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:52.370677948 CEST	58218	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:52.370702982 CEST	443	58218	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:52.370882988 CEST	58218	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:52.370882988 CEST	58218	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:52.370929003 CEST	443	58218	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:52.391695023 CEST	443	58213	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:52.391840935 CEST	443	58213	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:52.391940117 CEST	58213	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:52.391940117 CEST	58213	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:52.391973972 CEST	58213	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:52.391988039 CEST	443	58213	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:52.394288063 CEST	58219	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:52.394298077 CEST	443	58219	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:52.394606113 CEST	58219	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:52.394606113 CEST	58219	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:52.394629002 CEST	443	58219	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:52.395484924 CEST	443	58214	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:52.395553112 CEST	443	58214	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:52.395684004 CEST	58214	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:52.395684004 CEST	58214	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:52.395752907 CEST	58214	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:52.395760059 CEST	443	58214	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:52.397464991 CEST	58220	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:52.397543907 CEST	443	58220	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:52.397746086 CEST	58220	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:52.397746086 CEST	58220	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:52.397825003 CEST	443	58220	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:52.449122906 CEST	443	58215	172.217.16.196	192.168.2.4
Oct 25, 2024 08:21:52.449502945 CEST	58215	443	192.168.2.4	172.217.16.196
Oct 25, 2024 08:21:52.449564934 CEST	443	58215	172.217.16.196	192.168.2.4
Oct 25, 2024 08:21:52.450684071 CEST	443	58215	172.217.16.196	192.168.2.4
Oct 25, 2024 08:21:52.451040030 CEST	58215	443	192.168.2.4	172.217.16.196
Oct 25, 2024 08:21:52.451225996 CEST	443	58215	172.217.16.196	192.168.2.4
Oct 25, 2024 08:21:52.500591040 CEST	58215	443	192.168.2.4	172.217.16.196
Oct 25, 2024 08:21:52.641208887 CEST	58211	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:52.641278982 CEST	443	58211	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:53.070226908 CEST	443	58217	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:53.070738077 CEST	58217	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:53.070749998 CEST	443	58217	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:53.071221113 CEST	58217	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:53.071225882 CEST	443	58217	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:53.073340893 CEST	443	58216	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:53.073771954 CEST	58216	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:53.073801994 CEST	443	58216	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:53.074105024 CEST	58216	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:53.074115992 CEST	443	58216	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:53.117764950 CEST	443	58218	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:53.118118048 CEST	58218	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:53.118136883 CEST	443	58218	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:53.118490934 CEST	58218	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:53.118500948 CEST	443	58218	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:53.132754087 CEST	443	58220	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:53.133095980 CEST	58220	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:53.133112907 CEST	443	58220	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:53.133414030 CEST	58220	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:53.133419991 CEST	443	58220	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:53.138396978 CEST	443	58219	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:53.138755083 CEST	58219	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:53.138786077 CEST	443	58219	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:53.139100075 CEST	58219	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:53.139102936 CEST	443	58219	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:53.197086096 CEST	443	58217	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:53.197149992 CEST	443	58217	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:53.197246075 CEST	58217	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:53.197345018 CEST	58217	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:53.197355032 CEST	443	58217	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:53.197364092 CEST	58217	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:53.197367907 CEST	443	58217	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:53.200032949 CEST	58221	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:53.200119019 CEST	443	58221	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:53.200269938 CEST	58221	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:53.200464010 CEST	58221	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:53.200503111 CEST	443	58221	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:53.204818010 CEST	443	58216	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:53.204868078 CEST	443	58216	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:53.204936028 CEST	58216	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:53.205126047 CEST	58216	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:53.205126047 CEST	58216	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:53.205156088 CEST	443	58216	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:53.205182076 CEST	443	58216	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:53.210535049 CEST	58222	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:53.210556030 CEST	443	58222	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:53.210633039 CEST	58222	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:53.210752964 CEST	58222	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:53.210769892 CEST	443	58222	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:53.249629021 CEST	443	58218	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:53.249773026 CEST	443	58218	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:53.249846935 CEST	58218	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:53.249922991 CEST	58218	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:53.249939919 CEST	443	58218	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:53.249974012 CEST	58218	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:53.249988079 CEST	443	58218	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:53.252183914 CEST	58223	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:53.252271891 CEST	443	58223	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:53.252362013 CEST	58223	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:53.252463102 CEST	58223	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:53.252484083 CEST	443	58223	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:53.265386105 CEST	443	58220	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:53.265484095 CEST	443	58220	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:53.265551090 CEST	58220	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:53.265645981 CEST	58220	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:53.265678883 CEST	443	58220	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:53.265731096 CEST	58220	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:53.265747070 CEST	443	58220	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:53.267823935 CEST	58224	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:53.267839909 CEST	443	58224	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:53.267905951 CEST	58224	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:53.268086910 CEST	58224	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:53.268099070 CEST	443	58224	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:53.268271923 CEST	443	58219	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:53.268435001 CEST	443	58219	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:53.268501997 CEST	58219	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:53.268620968 CEST	58219	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:53.268620968 CEST	58219	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:53.268625975 CEST	443	58219	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:53.268634081 CEST	443	58219	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:53.270756960 CEST	58225	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:53.270798922 CEST	443	58225	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:53.270925045 CEST	58225	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:53.271090031 CEST	58225	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:53.271119118 CEST	443	58225	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:53.921874046 CEST	443	58221	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:53.922996044 CEST	58221	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:53.922996044 CEST	58221	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:53.923032045 CEST	443	58221	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:53.923059940 CEST	443	58221	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:53.947046995 CEST	443	58222	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:53.947700024 CEST	58222	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:53.947700977 CEST	58222	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:53.947736025 CEST	443	58222	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:53.947777987 CEST	443	58222	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:53.989383936 CEST	443	58223	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:53.989794970 CEST	58223	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:53.989826918 CEST	443	58223	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:53.990056038 CEST	58223	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:53.990071058 CEST	443	58223	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:53.994055986 CEST	443	58224	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:53.994628906 CEST	58224	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:53.994642019 CEST	443	58224	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:53.994908094 CEST	58224	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:53.994911909 CEST	443	58224	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.009938955 CEST	443	58225	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.010251045 CEST	58225	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:54.010279894 CEST	443	58225	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.010626078 CEST	58225	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:54.010638952 CEST	443	58225	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.049565077 CEST	443	58221	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.049706936 CEST	443	58221	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.049906015 CEST	58221	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:54.050213099 CEST	58221	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:54.050232887 CEST	443	58221	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.050271034 CEST	58221	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:54.050278902 CEST	443	58221	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.052922964 CEST	58226	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:54.052941084 CEST	443	58226	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.057259083 CEST	58226	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:54.057521105 CEST	58226	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:54.057533979 CEST	443	58226	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.077943087 CEST	443	58222	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.078017950 CEST	443	58222	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.078187943 CEST	58222	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:54.078263044 CEST	58222	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:54.078263044 CEST	58222	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:54.078304052 CEST	443	58222	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.078330994 CEST	443	58222	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.080368042 CEST	58227	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:54.080483913 CEST	443	58227	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.080672979 CEST	58227	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:54.080746889 CEST	58227	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:54.080766916 CEST	443	58227	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.124000072 CEST	443	58223	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.124387980 CEST	443	58223	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.124721050 CEST	58223	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:54.124721050 CEST	58223	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:54.124839067 CEST	58223	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:54.124856949 CEST	443	58223	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.126499891 CEST	58228	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:54.126547098 CEST	443	58228	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.126693964 CEST	58228	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:54.126844883 CEST	58228	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:54.126878977 CEST	443	58228	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.128546000 CEST	443	58224	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.128660917 CEST	443	58224	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.128748894 CEST	443	58224	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.128752947 CEST	58224	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:54.128941059 CEST	58224	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:54.128941059 CEST	58224	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:54.128993988 CEST	58224	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:54.128999949 CEST	443	58224	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.130640030 CEST	58229	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:54.130719900 CEST	443	58229	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.131027937 CEST	58229	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:54.131027937 CEST	58229	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:54.131105900 CEST	443	58229	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.139220953 CEST	443	58225	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.139391899 CEST	443	58225	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.139509916 CEST	58225	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:54.139511108 CEST	58225	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:54.139511108 CEST	58225	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:54.141139984 CEST	58230	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:54.141150951 CEST	443	58230	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.141258001 CEST	58230	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:54.141335964 CEST	58230	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:54.141343117 CEST	443	58230	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.445929050 CEST	58225	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:54.445991993 CEST	443	58225	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.822484016 CEST	443	58227	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.823092937 CEST	58227	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:54.823148012 CEST	443	58227	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.823787928 CEST	58227	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:54.823803902 CEST	443	58227	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.831434965 CEST	443	58226	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.831785917 CEST	58226	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:54.831804037 CEST	443	58226	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.832312107 CEST	58226	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:54.832317114 CEST	443	58226	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.862901926 CEST	443	58228	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.863265991 CEST	58228	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:54.863296986 CEST	443	58228	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.863730907 CEST	58228	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:54.863739014 CEST	443	58228	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.877671003 CEST	443	58229	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.877991915 CEST	58229	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:54.878047943 CEST	443	58229	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.878516912 CEST	58229	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:54.878530025 CEST	443	58229	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.879847050 CEST	443	58230	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.880238056 CEST	58230	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:54.880284071 CEST	443	58230	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.880594015 CEST	58230	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:54.880601883 CEST	443	58230	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.954097033 CEST	443	58227	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.954164982 CEST	443	58227	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.954231977 CEST	58227	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:54.962548018 CEST	58227	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:54.962573051 CEST	443	58227	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.968089104 CEST	443	58226	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.968178034 CEST	58231	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:54.968259096 CEST	443	58231	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.968338966 CEST	58231	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:54.968554020 CEST	443	58226	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.968605042 CEST	58226	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:54.968616962 CEST	443	58226	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.968664885 CEST	443	58226	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.968713045 CEST	58231	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:54.968724012 CEST	58226	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:54.968739033 CEST	443	58226	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.968750954 CEST	58226	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:54.968755960 CEST	443	58226	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.968763113 CEST	443	58231	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.968799114 CEST	58226	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:54.968802929 CEST	443	58226	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.972201109 CEST	58232	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:54.972268105 CEST	443	58232	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:54.972356081 CEST	58232	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:54.972520113 CEST	58232	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:54.972534895 CEST	443	58232	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:55.009180069 CEST	443	58229	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:55.009358883 CEST	443	58229	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:55.009427071 CEST	58229	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:55.009474993 CEST	58229	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:55.009474993 CEST	58229	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:55.009499073 CEST	443	58229	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:55.009536028 CEST	443	58229	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:55.010077953 CEST	443	58230	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:55.010175943 CEST	443	58230	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:55.010292053 CEST	443	58230	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:55.010482073 CEST	58230	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:55.010483027 CEST	58230	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:55.010483027 CEST	58230	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:55.012192965 CEST	58233	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:55.012274981 CEST	443	58233	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:55.012362003 CEST	58233	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:55.012502909 CEST	58233	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:55.012526989 CEST	443	58233	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:55.013056993 CEST	58234	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:55.013106108 CEST	443	58234	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:55.013169050 CEST	58234	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:55.013288021 CEST	58234	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:55.013319969 CEST	443	58234	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:55.038355112 CEST	443	58228	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:55.039046049 CEST	443	58228	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:55.039232969 CEST	58228	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:55.039232969 CEST	58228	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:55.039232969 CEST	58228	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:55.041619062 CEST	58235	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:55.041636944 CEST	443	58235	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:55.041785002 CEST	58235	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:55.041935921 CEST	58235	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:55.041951895 CEST	443	58235	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:55.313051939 CEST	58230	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:55.313095093 CEST	443	58230	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:55.338967085 CEST	58228	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:55.339030027 CEST	443	58228	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:55.715301037 CEST	443	58232	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:55.716478109 CEST	58232	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:55.716536045 CEST	443	58232	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:55.718015909 CEST	58232	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:55.718029022 CEST	443	58232	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:55.721676111 CEST	443	58231	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:55.722031116 CEST	58231	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:55.722060919 CEST	443	58231	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:55.722784996 CEST	58231	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:55.722798109 CEST	443	58231	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:55.949409008 CEST	443	58232	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:55.949522018 CEST	443	58231	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:55.949537992 CEST	443	58232	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:55.949595928 CEST	443	58231	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:55.949661970 CEST	58231	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:55.949727058 CEST	58232	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:55.949839115 CEST	58231	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:55.949876070 CEST	443	58231	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:55.951308012 CEST	58232	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:55.951356888 CEST	443	58232	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:55.951417923 CEST	58232	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:55.951433897 CEST	443	58232	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:55.960633039 CEST	443	58235	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:55.960740089 CEST	443	58234	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:55.961888075 CEST	443	58233	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:55.978837013 CEST	58235	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:55.978863955 CEST	443	58235	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:55.979413986 CEST	58235	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:55.979419947 CEST	443	58235	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:55.979932070 CEST	58234	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:55.980014086 CEST	443	58234	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:55.980952978 CEST	58234	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:55.980967045 CEST	443	58234	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:55.981458902 CEST	58233	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:55.981467009 CEST	443	58233	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:55.982235909 CEST	58233	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:55.982239962 CEST	443	58233	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:55.986265898 CEST	58236	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:55.986299038 CEST	443	58236	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:55.986593962 CEST	58236	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:55.987782001 CEST	58237	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:55.987859964 CEST	443	58237	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:55.987984896 CEST	58237	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:55.988320112 CEST	58237	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:55.988353968 CEST	443	58237	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:55.988859892 CEST	58236	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:55.988873959 CEST	443	58236	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:56.107551098 CEST	443	58235	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:56.107705116 CEST	443	58235	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:56.107779026 CEST	58235	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:56.108103991 CEST	58235	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:56.108143091 CEST	443	58235	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:56.108181000 CEST	58235	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:56.108197927 CEST	443	58235	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:56.109795094 CEST	443	58234	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:56.110572100 CEST	443	58234	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:56.110634089 CEST	58234	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:56.110694885 CEST	443	58234	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:56.110730886 CEST	443	58234	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:56.110842943 CEST	58234	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:56.111637115 CEST	58234	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:56.111665964 CEST	443	58234	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:56.117830992 CEST	58238	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:56.117860079 CEST	443	58238	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:56.117983103 CEST	58238	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:56.119710922 CEST	58239	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:56.119749069 CEST	443	58239	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:56.119810104 CEST	58239	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:56.120167971 CEST	58238	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:56.120184898 CEST	443	58238	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:56.121381044 CEST	58239	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:56.121412992 CEST	443	58239	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:56.121646881 CEST	443	58233	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:56.121948004 CEST	443	58233	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:56.122019053 CEST	58233	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:56.122255087 CEST	58233	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:56.122255087 CEST	58233	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:56.122275114 CEST	443	58233	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:56.122297049 CEST	443	58233	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:56.127293110 CEST	58240	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:56.127338886 CEST	443	58240	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:56.127409935 CEST	58240	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:56.128082037 CEST	58240	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:56.128112078 CEST	443	58240	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:56.732572079 CEST	443	58236	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:56.733030081 CEST	58236	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:56.733052969 CEST	443	58236	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:56.733455896 CEST	58236	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:56.733460903 CEST	443	58236	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:56.741596937 CEST	443	58237	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:56.741929054 CEST	58237	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:56.742002964 CEST	443	58237	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:56.742271900 CEST	58237	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:56.742291927 CEST	443	58237	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:56.866105080 CEST	443	58236	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:56.866175890 CEST	443	58236	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:56.866261959 CEST	58236	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:56.866573095 CEST	58236	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:56.866592884 CEST	443	58236	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:56.872946978 CEST	58241	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:56.873025894 CEST	443	58241	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:56.873106956 CEST	58241	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:56.873622894 CEST	58241	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:56.873657942 CEST	443	58241	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:56.876154900 CEST	443	58239	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:56.876699924 CEST	58239	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:56.876720905 CEST	443	58239	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:56.877232075 CEST	58239	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:56.877243042 CEST	443	58239	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:56.879029989 CEST	443	58237	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:56.879086971 CEST	443	58237	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:56.879154921 CEST	58237	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:56.879173994 CEST	443	58237	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:56.879201889 CEST	443	58237	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:56.879256010 CEST	58237	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:56.879436970 CEST	58237	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:56.879436970 CEST	58237	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:56.879467010 CEST	443	58237	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:56.879487991 CEST	443	58237	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:56.884001970 CEST	58242	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:56.884088039 CEST	443	58242	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:56.884161949 CEST	58242	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:56.884300947 CEST	58242	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:56.884335995 CEST	443	58242	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:56.887159109 CEST	443	58240	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:56.887969017 CEST	58240	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:56.887988091 CEST	443	58240	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:56.888797998 CEST	58240	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:56.888808966 CEST	443	58240	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:56.911967993 CEST	443	58238	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:56.912626028 CEST	58238	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:56.912638903 CEST	443	58238	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:56.913741112 CEST	58238	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:56.913746119 CEST	443	58238	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.009002924 CEST	443	58239	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.009159088 CEST	443	58239	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.009221077 CEST	58239	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.016927958 CEST	443	58240	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.016988993 CEST	443	58240	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.017083883 CEST	443	58240	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.017160892 CEST	58240	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.020643950 CEST	58239	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.020663023 CEST	443	58239	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.020695925 CEST	58239	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.020709038 CEST	443	58239	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.023025990 CEST	58240	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.023077011 CEST	443	58240	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.023108006 CEST	58240	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.023123980 CEST	443	58240	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.028296947 CEST	58243	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.028377056 CEST	443	58243	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.028456926 CEST	58243	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.029403925 CEST	58243	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.029442072 CEST	443	58243	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.030003071 CEST	58244	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.030036926 CEST	443	58244	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.030225039 CEST	58244	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.030384064 CEST	58244	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.030399084 CEST	443	58244	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.047749996 CEST	443	58238	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.048165083 CEST	443	58238	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.048218012 CEST	58238	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.048331022 CEST	58238	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.048338890 CEST	443	58238	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.048352003 CEST	58238	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.048357010 CEST	443	58238	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.051274061 CEST	58245	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.051372051 CEST	443	58245	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.051496983 CEST	58245	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.051795006 CEST	58245	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.051830053 CEST	443	58245	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.597529888 CEST	443	58241	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.597902060 CEST	58241	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.597960949 CEST	443	58241	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.598557949 CEST	58241	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.598572969 CEST	443	58241	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.616430044 CEST	443	58242	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.617059946 CEST	58242	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.617116928 CEST	443	58242	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.617881060 CEST	58242	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.617893934 CEST	443	58242	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.748506069 CEST	443	58242	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.748655081 CEST	443	58242	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.748712063 CEST	58242	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.748814106 CEST	58242	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.748852015 CEST	443	58242	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.748876095 CEST	58242	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.748891115 CEST	443	58242	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.751208067 CEST	58246	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.751246929 CEST	443	58246	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.751329899 CEST	58246	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.751465082 CEST	58246	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.751488924 CEST	443	58246	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.765861988 CEST	443	58241	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.766052008 CEST	443	58241	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.766124010 CEST	58241	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.766124010 CEST	58241	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.766196966 CEST	58241	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.766252995 CEST	443	58241	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.766962051 CEST	443	58243	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.767431974 CEST	58243	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.767455101 CEST	443	58243	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.767915010 CEST	58243	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.767925024 CEST	443	58243	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.768683910 CEST	58247	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.768764973 CEST	443	58247	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.768845081 CEST	58247	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.768995047 CEST	58247	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.769031048 CEST	443	58247	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.774286032 CEST	443	58244	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.774574041 CEST	58244	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.774589062 CEST	443	58244	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.774915934 CEST	58244	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.774920940 CEST	443	58244	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.788099051 CEST	443	58245	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.788386106 CEST	58245	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.788409948 CEST	443	58245	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.788705111 CEST	58245	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.788714886 CEST	443	58245	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.896393061 CEST	443	58243	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.896462917 CEST	443	58243	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.896559000 CEST	443	58243	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.896576881 CEST	58243	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.896640062 CEST	58243	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.896672010 CEST	58243	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.896682024 CEST	443	58243	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.896693945 CEST	58243	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.896699905 CEST	443	58243	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.898562908 CEST	58248	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.898590088 CEST	443	58248	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.898644924 CEST	58248	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.898781061 CEST	58248	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.898794889 CEST	443	58248	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.906678915 CEST	443	58244	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.906826019 CEST	443	58244	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.906960011 CEST	58244	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.906994104 CEST	58244	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.906994104 CEST	58244	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.907012939 CEST	443	58244	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.907023907 CEST	443	58244	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.910164118 CEST	58249	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.910243034 CEST	443	58249	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.910310030 CEST	58249	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.910487890 CEST	58249	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.910526037 CEST	443	58249	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.922671080 CEST	443	58245	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.922820091 CEST	443	58245	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.922893047 CEST	58245	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.922960997 CEST	58245	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.922960997 CEST	58245	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.922988892 CEST	443	58245	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.923013926 CEST	443	58245	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.924854994 CEST	58250	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.924865961 CEST	443	58250	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:57.925137043 CEST	58250	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.925276995 CEST	58250	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:57.925290108 CEST	443	58250	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:58.494833946 CEST	443	58246	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:58.498061895 CEST	58246	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:58.498085976 CEST	443	58246	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:58.499135017 CEST	58246	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:58.499140024 CEST	443	58246	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:58.511275053 CEST	443	58247	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:58.511750937 CEST	58247	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:58.511810064 CEST	443	58247	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:58.512497902 CEST	58247	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:58.512511015 CEST	443	58247	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:58.626872063 CEST	443	58246	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:58.627013922 CEST	443	58246	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:58.627137899 CEST	58246	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:58.627326012 CEST	58246	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:58.627346039 CEST	443	58246	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:58.627361059 CEST	58246	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:58.627367973 CEST	443	58246	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:58.631294012 CEST	58251	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:58.631378889 CEST	443	58251	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:58.631606102 CEST	58251	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:58.631861925 CEST	58251	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:58.631897926 CEST	443	58251	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:58.639337063 CEST	443	58249	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:58.639867067 CEST	58249	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:58.639903069 CEST	443	58249	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:58.640516043 CEST	58249	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:58.640527964 CEST	443	58249	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:58.643899918 CEST	443	58247	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:58.644068956 CEST	443	58247	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:58.644134998 CEST	58247	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:58.644318104 CEST	58247	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:58.644356966 CEST	443	58247	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:58.644388914 CEST	58247	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:58.644406080 CEST	443	58247	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:58.647986889 CEST	58252	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:58.648072958 CEST	443	58252	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:58.648181915 CEST	58252	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:58.648413897 CEST	58252	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:58.648447990 CEST	443	58252	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:58.651170969 CEST	443	58248	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:58.651598930 CEST	58248	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:58.651624918 CEST	443	58248	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:58.652154922 CEST	58248	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:58.652159929 CEST	443	58248	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:58.661772013 CEST	443	58250	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:58.662096024 CEST	58250	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:58.662102938 CEST	443	58250	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:58.662630081 CEST	58250	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:58.662632942 CEST	443	58250	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:58.768444061 CEST	443	58249	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:58.768520117 CEST	443	58249	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:58.768582106 CEST	58249	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:58.768830061 CEST	58249	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:58.768863916 CEST	443	58249	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:58.768893003 CEST	58249	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:58.768907070 CEST	443	58249	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:58.773571968 CEST	58253	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:58.773650885 CEST	443	58253	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:58.773773909 CEST	58253	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:58.773977041 CEST	58253	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:58.774012089 CEST	443	58253	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:58.783714056 CEST	443	58248	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:58.783773899 CEST	443	58248	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:58.783871889 CEST	443	58248	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:58.783925056 CEST	58248	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:58.784137011 CEST	58248	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:58.784145117 CEST	443	58248	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:58.784173012 CEST	58248	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:58.784177065 CEST	443	58248	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:58.788450003 CEST	58254	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:58.788500071 CEST	443	58254	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:58.788595915 CEST	58254	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:58.788889885 CEST	58254	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:58.788917065 CEST	443	58254	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:58.790400982 CEST	443	58250	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:58.790535927 CEST	443	58250	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:58.790646076 CEST	58250	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:58.790819883 CEST	58250	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:58.790822983 CEST	443	58250	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:58.790831089 CEST	58250	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:58.790833950 CEST	443	58250	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:58.793404102 CEST	58255	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:58.793430090 CEST	443	58255	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:58.793520927 CEST	58255	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:58.793668985 CEST	58255	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:58.793693066 CEST	443	58255	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:59.355864048 CEST	443	58251	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:59.356575966 CEST	58251	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:59.356647015 CEST	443	58251	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:59.356705904 CEST	58251	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:59.356719017 CEST	443	58251	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:59.376111984 CEST	443	58252	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:59.376473904 CEST	58252	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:59.376554012 CEST	443	58252	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:59.377033949 CEST	58252	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:59.377048016 CEST	443	58252	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:59.483571053 CEST	443	58251	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:59.483623028 CEST	443	58251	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:59.483684063 CEST	58251	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:59.484071016 CEST	58251	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:59.484098911 CEST	443	58251	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:59.490592957 CEST	58256	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:59.490634918 CEST	443	58256	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:59.490833044 CEST	58256	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:59.491080046 CEST	58256	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:59.491107941 CEST	443	58256	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:59.504858017 CEST	443	58252	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:59.504914045 CEST	443	58252	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:59.504966974 CEST	443	58252	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:59.505002975 CEST	58252	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:59.505059004 CEST	58252	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:59.505173922 CEST	58252	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:59.505234003 CEST	443	58252	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:59.505270004 CEST	58252	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:59.505285025 CEST	443	58252	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:59.507083893 CEST	58257	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:59.507107019 CEST	443	58257	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:59.507339001 CEST	58257	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:59.507473946 CEST	58257	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:59.507488012 CEST	443	58257	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:59.785768032 CEST	443	58253	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:59.786164999 CEST	58253	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:59.786241055 CEST	443	58253	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:59.786578894 CEST	58253	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:59.786595106 CEST	443	58253	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:59.789670944 CEST	443	58255	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:59.789716005 CEST	443	58254	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:59.790009022 CEST	58255	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:59.790043116 CEST	443	58255	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:59.790122032 CEST	58254	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:59.790174007 CEST	443	58254	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:59.790349960 CEST	58255	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:59.790359974 CEST	443	58255	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:59.790636063 CEST	58254	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:59.790651083 CEST	443	58254	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:59.918461084 CEST	443	58253	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:59.918608904 CEST	443	58253	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:59.918679953 CEST	58253	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:59.918757915 CEST	58253	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:59.918798923 CEST	443	58253	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:59.918831110 CEST	58253	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:59.918847084 CEST	443	58253	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:59.919049025 CEST	443	58254	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:59.919121981 CEST	443	58254	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:59.919174910 CEST	58254	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:59.919199944 CEST	443	58254	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:59.919229984 CEST	443	58254	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:59.919286966 CEST	58254	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:59.919286966 CEST	58254	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:59.919286966 CEST	58254	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:59.919346094 CEST	443	58254	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:59.920387983 CEST	443	58255	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:59.920866966 CEST	443	58255	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:59.920924902 CEST	58255	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:59.921164989 CEST	58255	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:59.921164989 CEST	58255	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:59.921181917 CEST	443	58255	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:59.921202898 CEST	443	58255	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:59.921792030 CEST	58258	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:59.921833992 CEST	443	58258	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:59.921906948 CEST	58258	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:59.922589064 CEST	58258	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:59.922616005 CEST	443	58258	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:59.922727108 CEST	58259	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:59.922740936 CEST	443	58259	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:59.922833920 CEST	58259	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:59.922939062 CEST	58259	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:59.922950029 CEST	443	58259	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:59.923717976 CEST	58260	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:59.923758030 CEST	443	58260	13.107.246.45	192.168.2.4
Oct 25, 2024 08:21:59.923893929 CEST	58260	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:59.924005032 CEST	58260	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:21:59.924031019 CEST	443	58260	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:00.219213009 CEST	58254	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:00.219264984 CEST	443	58254	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:00.230951071 CEST	443	58256	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:00.231400967 CEST	58256	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:00.231461048 CEST	443	58256	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:00.231825113 CEST	58256	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:00.231837988 CEST	443	58256	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:00.366955996 CEST	443	58256	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:00.367049932 CEST	443	58256	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:00.367090940 CEST	443	58256	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:00.367151976 CEST	58256	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:00.367151976 CEST	58256	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:00.367285013 CEST	58256	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:00.367351055 CEST	443	58256	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:00.367392063 CEST	58256	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:00.367408991 CEST	443	58256	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:00.369860888 CEST	58261	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:00.369918108 CEST	443	58261	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:00.369992971 CEST	58261	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:00.370126009 CEST	58261	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:00.370141983 CEST	443	58261	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:00.506402969 CEST	443	58257	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:00.506810904 CEST	58257	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:00.506824017 CEST	443	58257	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:00.507242918 CEST	58257	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:00.507247925 CEST	443	58257	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:00.637399912 CEST	443	58257	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:00.637629986 CEST	443	58257	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:00.637743950 CEST	58257	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:00.637783051 CEST	58257	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:00.637790918 CEST	443	58257	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:00.637801886 CEST	58257	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:00.637805939 CEST	443	58257	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:00.640081882 CEST	58262	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:00.640151978 CEST	443	58262	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:00.640288115 CEST	58262	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:00.640435934 CEST	58262	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:00.640455008 CEST	443	58262	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:00.665539026 CEST	443	58260	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:00.665872097 CEST	58260	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:00.665913105 CEST	443	58260	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:00.666280031 CEST	58260	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:00.666291952 CEST	443	58260	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:00.671341896 CEST	443	58259	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:00.671639919 CEST	58259	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:00.671653032 CEST	443	58259	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:00.672003984 CEST	58259	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:00.672008038 CEST	443	58259	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:00.674459934 CEST	443	58258	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:00.674741983 CEST	58258	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:00.674833059 CEST	443	58258	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:00.675060987 CEST	58258	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:00.675076008 CEST	443	58258	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:00.798899889 CEST	443	58260	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:00.799238920 CEST	443	58260	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:00.799295902 CEST	443	58260	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:00.799305916 CEST	58260	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:00.799376011 CEST	58260	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:00.801592112 CEST	58260	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:00.801620960 CEST	443	58260	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:00.801647902 CEST	58260	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:00.801665068 CEST	443	58260	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:00.804037094 CEST	58263	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:00.804097891 CEST	443	58263	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:00.804172039 CEST	58263	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:00.804331064 CEST	58263	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:00.804346085 CEST	443	58263	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:00.804935932 CEST	443	58259	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:00.805082083 CEST	443	58259	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:00.805145979 CEST	58259	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:00.805166006 CEST	58259	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:00.805176020 CEST	443	58259	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:00.805185080 CEST	58259	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:00.805188894 CEST	443	58259	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:00.807121992 CEST	58264	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:00.807193995 CEST	443	58264	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:00.807301044 CEST	58264	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:00.807441950 CEST	58264	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:00.807471037 CEST	443	58264	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:00.815207958 CEST	443	58258	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:00.815279961 CEST	443	58258	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:00.815372944 CEST	58258	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:00.815404892 CEST	443	58258	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:00.815435886 CEST	443	58258	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:00.815490007 CEST	58258	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:00.815546989 CEST	443	58258	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:00.815576077 CEST	58258	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:00.815576077 CEST	58258	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:00.815596104 CEST	443	58258	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:00.815614939 CEST	443	58258	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:00.817311049 CEST	58265	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:00.817409039 CEST	443	58265	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:00.817498922 CEST	58265	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:00.817658901 CEST	58265	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:00.817691088 CEST	443	58265	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:01.096636057 CEST	443	58261	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:01.097577095 CEST	58261	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:01.097599030 CEST	443	58261	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:01.098038912 CEST	58261	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:01.098043919 CEST	443	58261	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:01.226785898 CEST	443	58261	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:01.226850033 CEST	443	58261	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:01.226914883 CEST	58261	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:01.227161884 CEST	58261	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:01.227180958 CEST	443	58261	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:01.227210999 CEST	58261	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:01.227217913 CEST	443	58261	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:01.229883909 CEST	58266	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:01.229963064 CEST	443	58266	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:01.230056047 CEST	58266	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:01.230252981 CEST	58266	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:01.230274916 CEST	443	58266	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:01.387691975 CEST	443	58262	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:01.388164997 CEST	58262	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:01.388225079 CEST	443	58262	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:01.388530970 CEST	58262	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:01.388546944 CEST	443	58262	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:01.519778013 CEST	443	58262	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:01.519853115 CEST	443	58262	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:01.519958973 CEST	58262	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:01.520061970 CEST	58262	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:01.520061970 CEST	58262	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:01.520097017 CEST	443	58262	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:01.520123005 CEST	443	58262	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:01.523571968 CEST	58267	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:01.523648024 CEST	443	58267	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:01.523765087 CEST	58267	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:01.523943901 CEST	58267	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:01.523960114 CEST	443	58267	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:01.536343098 CEST	443	58263	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:01.536871910 CEST	58263	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:01.536894083 CEST	443	58263	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:01.537688971 CEST	58263	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:01.537693977 CEST	443	58263	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:01.553199053 CEST	443	58265	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:01.553709984 CEST	58265	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:01.553735018 CEST	443	58265	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:01.554114103 CEST	58265	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:01.554125071 CEST	443	58265	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:01.581417084 CEST	443	58264	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:01.581811905 CEST	58264	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:01.581870079 CEST	443	58264	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:01.582159996 CEST	58264	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:01.582173109 CEST	443	58264	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:01.666943073 CEST	443	58263	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:01.667000055 CEST	443	58263	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:01.667205095 CEST	58263	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:01.667269945 CEST	58263	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:01.667269945 CEST	58263	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:01.667306900 CEST	443	58263	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:01.667349100 CEST	443	58263	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:01.670104027 CEST	58268	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:01.670185089 CEST	443	58268	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:01.670268059 CEST	58268	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:01.670449972 CEST	58268	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:01.670486927 CEST	443	58268	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:01.683667898 CEST	443	58265	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:01.683811903 CEST	443	58265	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:01.683893919 CEST	58265	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:01.683949947 CEST	58265	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:01.683979034 CEST	443	58265	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:01.684026003 CEST	58265	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:01.684039116 CEST	443	58265	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:01.686340094 CEST	58269	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:01.686363935 CEST	443	58269	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:01.686494112 CEST	58269	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:01.686690092 CEST	58269	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:01.686702967 CEST	443	58269	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:01.721728086 CEST	443	58264	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:01.721793890 CEST	443	58264	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:01.721941948 CEST	443	58264	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:01.721972942 CEST	58264	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:01.722017050 CEST	58264	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:01.722091913 CEST	58264	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:01.722091913 CEST	58264	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:01.722127914 CEST	443	58264	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:01.722172022 CEST	443	58264	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:01.724566936 CEST	58270	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:01.724597931 CEST	443	58270	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:01.724715948 CEST	58270	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:01.724910021 CEST	58270	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:01.724929094 CEST	443	58270	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:01.971833944 CEST	443	58266	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:01.972297907 CEST	58266	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:01.972357035 CEST	443	58266	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:01.972733021 CEST	58266	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:01.972748041 CEST	443	58266	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:02.109544039 CEST	443	58266	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:02.109844923 CEST	443	58266	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:02.109896898 CEST	443	58266	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:02.109965086 CEST	58266	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:02.110090971 CEST	58266	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:02.110125065 CEST	443	58266	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:02.110151052 CEST	58266	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:02.110165119 CEST	443	58266	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:02.112768888 CEST	58271	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:02.112798929 CEST	443	58271	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:02.113173008 CEST	58271	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:02.113378048 CEST	58271	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:02.113384962 CEST	443	58271	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:02.256275892 CEST	443	58267	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:02.256782055 CEST	58267	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:02.256835938 CEST	443	58267	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:02.257513046 CEST	58267	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:02.257529020 CEST	443	58267	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:02.386552095 CEST	443	58267	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:02.386703014 CEST	443	58267	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:02.386853933 CEST	58267	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:02.386930943 CEST	58267	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:02.386930943 CEST	58267	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:02.386976004 CEST	443	58267	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:02.387002945 CEST	443	58267	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:02.389626980 CEST	58272	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:02.389718056 CEST	443	58272	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:02.389816046 CEST	58272	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:02.389981031 CEST	58272	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:02.390018940 CEST	443	58272	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:02.414824963 CEST	443	58268	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:02.415308952 CEST	58268	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:02.415335894 CEST	443	58268	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:02.415680885 CEST	58268	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:02.415685892 CEST	443	58268	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:02.432657957 CEST	443	58269	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:02.433092117 CEST	58269	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:02.433105946 CEST	443	58269	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:02.433636904 CEST	58269	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:02.433645010 CEST	443	58269	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:02.441122055 CEST	443	58215	172.217.16.196	192.168.2.4
Oct 25, 2024 08:22:02.441191912 CEST	443	58215	172.217.16.196	192.168.2.4
Oct 25, 2024 08:22:02.441308022 CEST	58215	443	192.168.2.4	172.217.16.196
Oct 25, 2024 08:22:02.464147091 CEST	443	58270	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:02.464574099 CEST	58270	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:02.464632034 CEST	443	58270	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:02.465074062 CEST	58270	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:02.465085030 CEST	443	58270	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:02.547857046 CEST	443	58268	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:02.548067093 CEST	443	58268	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:02.548959970 CEST	58268	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:02.548960924 CEST	58268	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:02.548960924 CEST	58268	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:02.551199913 CEST	58273	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:02.551229000 CEST	443	58273	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:02.551347971 CEST	58273	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:02.551590919 CEST	58273	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:02.551600933 CEST	443	58273	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:02.565798044 CEST	443	58269	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:02.565943956 CEST	443	58269	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:02.566082001 CEST	58269	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:02.566148996 CEST	58269	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:02.566167116 CEST	443	58269	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:02.566179991 CEST	58269	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:02.566186905 CEST	443	58269	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:02.568353891 CEST	58274	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:02.568437099 CEST	443	58274	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:02.568557024 CEST	58274	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:02.568739891 CEST	58274	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:02.568768024 CEST	443	58274	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:02.597230911 CEST	443	58270	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:02.597278118 CEST	443	58270	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:02.597359896 CEST	58270	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:02.597373962 CEST	443	58270	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:02.597635031 CEST	58270	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:02.598546028 CEST	58270	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:02.598582029 CEST	443	58270	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:02.598683119 CEST	58270	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:02.598700047 CEST	443	58270	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:02.603770971 CEST	58275	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:02.603782892 CEST	443	58275	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:02.603883028 CEST	58275	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:02.604027033 CEST	58275	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:02.604038954 CEST	443	58275	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:02.841258049 CEST	443	58271	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:02.841747046 CEST	58271	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:02.841761112 CEST	443	58271	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:02.842144966 CEST	58271	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:02.842155933 CEST	443	58271	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:02.860599041 CEST	58268	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:02.860641003 CEST	443	58268	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:02.970345020 CEST	443	58271	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:02.970388889 CEST	443	58271	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:02.970704079 CEST	58271	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:02.970704079 CEST	58271	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:02.970802069 CEST	58271	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:02.970809937 CEST	443	58271	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:02.973750114 CEST	58276	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:02.973831892 CEST	443	58276	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:02.973978043 CEST	58276	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:02.974112988 CEST	58276	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:02.974134922 CEST	443	58276	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:03.133900881 CEST	443	58272	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:03.134737968 CEST	58272	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:03.134737968 CEST	58272	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:03.134780884 CEST	443	58272	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:03.134824038 CEST	443	58272	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:03.266606092 CEST	443	58272	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:03.266686916 CEST	443	58272	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:03.266777039 CEST	443	58272	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:03.266928911 CEST	58272	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:03.267010927 CEST	58272	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:03.267010927 CEST	58272	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:03.267055988 CEST	443	58272	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:03.267091990 CEST	443	58272	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:03.270314932 CEST	58277	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:03.270406961 CEST	443	58277	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:03.270500898 CEST	58277	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:03.270656109 CEST	58277	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:03.270688057 CEST	443	58277	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:03.304306984 CEST	443	58274	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:03.305114031 CEST	58274	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:03.305114031 CEST	58274	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:03.305149078 CEST	443	58274	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:03.305186987 CEST	443	58274	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:03.329195976 CEST	443	58273	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:03.330003977 CEST	58273	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:03.330003977 CEST	58273	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:03.330025911 CEST	443	58273	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:03.330039978 CEST	443	58273	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:03.343388081 CEST	443	58275	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:03.343766928 CEST	58275	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:03.343785048 CEST	443	58275	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:03.344079018 CEST	58275	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:03.344083071 CEST	443	58275	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:03.434753895 CEST	443	58274	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:03.434959888 CEST	443	58274	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:03.435098886 CEST	58274	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:03.435098886 CEST	58274	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:03.435178995 CEST	58274	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:03.435219049 CEST	443	58274	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:03.437928915 CEST	58278	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:03.438018084 CEST	443	58278	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:03.438205957 CEST	58278	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:03.438299894 CEST	58278	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:03.438323021 CEST	443	58278	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:03.461307049 CEST	443	58273	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:03.461524963 CEST	443	58273	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:03.461687088 CEST	58273	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:03.461687088 CEST	58273	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:03.461728096 CEST	58273	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:03.461745024 CEST	443	58273	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:03.463962078 CEST	58279	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:03.464011908 CEST	443	58279	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:03.464284897 CEST	58279	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:03.464284897 CEST	58279	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:03.464353085 CEST	443	58279	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:03.593599081 CEST	443	58275	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:03.593750954 CEST	443	58275	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:03.593971014 CEST	58275	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:03.594074965 CEST	58275	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:03.594074965 CEST	58275	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:03.594096899 CEST	443	58275	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:03.594109058 CEST	443	58275	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:03.596446037 CEST	58280	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:03.596493959 CEST	443	58280	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:03.596604109 CEST	58280	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:03.596776962 CEST	58280	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:03.596791983 CEST	443	58280	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:03.703054905 CEST	443	58276	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:03.703552961 CEST	58276	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:03.703634977 CEST	443	58276	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:03.705224037 CEST	58276	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:03.705240965 CEST	443	58276	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:03.833055019 CEST	443	58276	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:03.833126068 CEST	443	58276	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:03.833204031 CEST	58276	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:03.833492994 CEST	58276	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:03.833522081 CEST	443	58276	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:03.833554983 CEST	58276	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:03.833563089 CEST	443	58276	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:03.836169958 CEST	58281	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:03.836257935 CEST	443	58281	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:03.836401939 CEST	58281	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:03.836647987 CEST	58281	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:03.836685896 CEST	443	58281	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:04.010979891 CEST	443	58277	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:04.011423111 CEST	58277	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:04.011451006 CEST	443	58277	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:04.012101889 CEST	58277	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:04.012108088 CEST	443	58277	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:04.047700882 CEST	58215	443	192.168.2.4	172.217.16.196
Oct 25, 2024 08:22:04.047765970 CEST	443	58215	172.217.16.196	192.168.2.4
Oct 25, 2024 08:22:04.143188953 CEST	443	58277	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:04.143347025 CEST	443	58277	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:04.143424988 CEST	58277	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:04.143527031 CEST	58277	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:04.143572092 CEST	443	58277	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:04.143599033 CEST	58277	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:04.143616915 CEST	443	58277	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:04.146413088 CEST	58282	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:04.146470070 CEST	443	58282	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:04.146536112 CEST	58282	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:04.146680117 CEST	58282	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:04.146699905 CEST	443	58282	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:04.199501038 CEST	443	58279	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:04.199872017 CEST	58279	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:04.199913979 CEST	443	58279	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:04.200289965 CEST	58279	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:04.200300932 CEST	443	58279	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:04.208199024 CEST	443	58278	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:04.208517075 CEST	58278	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:04.208563089 CEST	443	58278	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:04.208883047 CEST	58278	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:04.208892107 CEST	443	58278	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:04.331104994 CEST	443	58279	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:04.331168890 CEST	443	58279	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:04.331247091 CEST	58279	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:04.331423044 CEST	58279	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:04.331444025 CEST	443	58279	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:04.331485987 CEST	58279	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:04.331497908 CEST	443	58279	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:04.333877087 CEST	58283	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:04.333962917 CEST	443	58283	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:04.334045887 CEST	58283	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:04.334193945 CEST	58283	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:04.334242105 CEST	443	58283	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:04.337867022 CEST	443	58278	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:04.338020086 CEST	443	58278	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:04.338166952 CEST	58278	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:04.338166952 CEST	58278	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:04.338166952 CEST	58278	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:04.340094090 CEST	58284	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:04.340186119 CEST	443	58284	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:04.340257883 CEST	58284	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:04.340393066 CEST	58284	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:04.340429068 CEST	443	58284	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:04.345014095 CEST	443	58280	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:04.345329046 CEST	58280	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:04.345355988 CEST	443	58280	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:04.345665932 CEST	58280	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:04.345670938 CEST	443	58280	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:04.477562904 CEST	443	58280	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:04.477644920 CEST	443	58280	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:04.477756977 CEST	58280	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:04.477777958 CEST	443	58280	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:04.477838039 CEST	58280	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:04.477879047 CEST	58280	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:04.477902889 CEST	443	58280	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:04.477919102 CEST	58280	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:04.477926970 CEST	443	58280	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:04.479902983 CEST	58285	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:04.479924917 CEST	443	58285	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:04.480050087 CEST	58285	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:04.480179071 CEST	58285	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:04.480200052 CEST	443	58285	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:04.584609985 CEST	443	58281	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:04.584933996 CEST	58281	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:04.584995985 CEST	443	58281	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:04.585287094 CEST	58281	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:04.585300922 CEST	443	58281	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:04.641021013 CEST	58278	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:04.641086102 CEST	443	58278	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:04.719158888 CEST	443	58281	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:04.719233990 CEST	443	58281	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:04.719497919 CEST	58281	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:04.719579935 CEST	58281	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:04.719579935 CEST	58281	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:04.719624043 CEST	443	58281	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:04.719650030 CEST	443	58281	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:04.722105980 CEST	58286	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:04.722199917 CEST	443	58286	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:04.722558975 CEST	58286	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:04.722558975 CEST	58286	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:04.722693920 CEST	443	58286	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:04.880934000 CEST	443	58282	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:04.881681919 CEST	58282	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:04.881683111 CEST	58282	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:04.881730080 CEST	443	58282	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:04.881748915 CEST	443	58282	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:05.012728930 CEST	443	58282	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:05.012790918 CEST	443	58282	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:05.013139009 CEST	58282	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:05.013139009 CEST	58282	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:05.013139009 CEST	58282	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:05.016025066 CEST	58287	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:05.016057014 CEST	443	58287	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:05.016304970 CEST	58287	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:05.016304970 CEST	58287	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:05.016331911 CEST	443	58287	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:05.077353954 CEST	443	58283	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:05.077790022 CEST	58283	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:05.077855110 CEST	443	58283	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:05.078318119 CEST	58283	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:05.078337908 CEST	443	58283	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:05.097340107 CEST	443	58284	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:05.097863913 CEST	58284	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:05.097929955 CEST	443	58284	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:05.098102093 CEST	58284	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:05.098117113 CEST	443	58284	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:05.209393978 CEST	443	58283	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:05.209461927 CEST	443	58283	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:05.209638119 CEST	58283	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:05.209737062 CEST	58283	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:05.209738016 CEST	58283	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:05.209784985 CEST	443	58283	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:05.209814072 CEST	443	58283	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:05.211744070 CEST	58288	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:05.211810112 CEST	443	58288	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:05.211958885 CEST	58288	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:05.212027073 CEST	58288	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:05.212047100 CEST	443	58288	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:05.220535994 CEST	443	58285	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:05.221194029 CEST	58285	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:05.221194029 CEST	58285	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:05.221213102 CEST	443	58285	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:05.221221924 CEST	443	58285	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:05.232692957 CEST	443	58284	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:05.232734919 CEST	443	58284	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:05.232868910 CEST	443	58284	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:05.233050108 CEST	58284	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:05.233050108 CEST	58284	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:05.233050108 CEST	58284	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:05.233155012 CEST	58284	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:05.233194113 CEST	443	58284	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:05.235699892 CEST	58289	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:05.235788107 CEST	443	58289	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:05.235975027 CEST	58289	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:05.235975981 CEST	58289	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:05.236057997 CEST	443	58289	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:05.327625036 CEST	58282	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:05.327691078 CEST	443	58282	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:05.359788895 CEST	443	58285	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:05.359862089 CEST	443	58285	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:05.359998941 CEST	443	58285	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:05.360045910 CEST	58285	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:05.360291004 CEST	58285	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:05.360291004 CEST	58285	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:05.360780954 CEST	58285	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:05.360797882 CEST	443	58285	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:05.362320900 CEST	58290	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:05.362363100 CEST	443	58290	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:05.362561941 CEST	58290	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:05.362606049 CEST	58290	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:05.362613916 CEST	443	58290	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:05.454874039 CEST	443	58286	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:05.455234051 CEST	58286	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:05.455352068 CEST	443	58286	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:05.455585003 CEST	58286	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:05.455600977 CEST	443	58286	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:05.586873055 CEST	443	58286	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:05.586910009 CEST	443	58286	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:05.586961031 CEST	443	58286	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:05.587304115 CEST	58286	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:05.587305069 CEST	58286	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:05.587431908 CEST	58286	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:05.587475061 CEST	443	58286	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:05.589473963 CEST	58291	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:05.589562893 CEST	443	58291	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:05.589998007 CEST	58291	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:05.589998007 CEST	58291	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:05.590127945 CEST	443	58291	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:05.760356903 CEST	443	58287	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:05.760814905 CEST	58287	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:05.760842085 CEST	443	58287	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:05.761207104 CEST	58287	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:05.761213064 CEST	443	58287	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:05.893570900 CEST	443	58287	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:05.893661976 CEST	443	58287	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:05.893722057 CEST	58287	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:05.893955946 CEST	58287	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:05.893979073 CEST	443	58287	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:05.893991947 CEST	58287	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:05.893999100 CEST	443	58287	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:05.896758080 CEST	58292	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:05.896785021 CEST	443	58292	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:05.896852970 CEST	58292	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:05.897038937 CEST	58292	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:05.897049904 CEST	443	58292	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:05.947652102 CEST	443	58288	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:05.948013067 CEST	58288	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:05.948086977 CEST	443	58288	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:05.948429108 CEST	58288	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:05.948447943 CEST	443	58288	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:05.970237970 CEST	443	58289	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:05.970662117 CEST	58289	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:05.970702887 CEST	443	58289	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:05.971055984 CEST	58289	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:05.971081972 CEST	443	58289	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.079171896 CEST	443	58288	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.079204082 CEST	443	58288	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.079258919 CEST	58288	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.079267025 CEST	443	58288	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.079348087 CEST	58288	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.079461098 CEST	58288	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.079461098 CEST	58288	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.079492092 CEST	443	58288	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.079514027 CEST	443	58288	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.081825018 CEST	58293	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.081924915 CEST	443	58293	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.082025051 CEST	58293	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.082199097 CEST	58293	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.082233906 CEST	443	58293	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.098139048 CEST	443	58290	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.098479033 CEST	58290	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.098500967 CEST	443	58290	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.098860979 CEST	58290	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.098870993 CEST	443	58290	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.100008965 CEST	443	58289	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.100156069 CEST	443	58289	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.100214958 CEST	58289	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.100256920 CEST	58289	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.100256920 CEST	58289	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.100279093 CEST	443	58289	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.100291014 CEST	443	58289	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.102098942 CEST	58294	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.102132082 CEST	443	58294	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.102237940 CEST	58294	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.102361917 CEST	58294	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.102374077 CEST	443	58294	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.228482962 CEST	443	58290	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.228537083 CEST	443	58290	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.228641033 CEST	58290	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.228663921 CEST	443	58290	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.228693008 CEST	443	58290	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.228756905 CEST	58290	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.228811979 CEST	58290	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.228831053 CEST	443	58290	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.228861094 CEST	58290	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.228873968 CEST	443	58290	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.230823994 CEST	58295	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.230874062 CEST	443	58295	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.230941057 CEST	58295	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.231076002 CEST	58295	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.231091976 CEST	443	58295	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.322292089 CEST	443	58291	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.322743893 CEST	58291	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.322792053 CEST	443	58291	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.323169947 CEST	58291	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.323178053 CEST	443	58291	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.452296972 CEST	443	58291	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.452328920 CEST	443	58291	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.452399015 CEST	443	58291	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.452423096 CEST	58291	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.452487946 CEST	58291	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.452637911 CEST	58291	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.452686071 CEST	443	58291	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.452716112 CEST	58291	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.452730894 CEST	443	58291	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.455415964 CEST	58296	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.455456018 CEST	443	58296	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.455518961 CEST	58296	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.455678940 CEST	58296	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.455693007 CEST	443	58296	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.645585060 CEST	443	58292	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.645966053 CEST	58292	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.645998955 CEST	443	58292	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.646480083 CEST	58292	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.646495104 CEST	443	58292	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.779881001 CEST	443	58292	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.779913902 CEST	443	58292	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.779963970 CEST	443	58292	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.779982090 CEST	58292	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.780092955 CEST	58292	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.780179977 CEST	58292	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.780179977 CEST	58292	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.780196905 CEST	443	58292	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.780208111 CEST	443	58292	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.782567024 CEST	58297	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.782664061 CEST	443	58297	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.782809973 CEST	58297	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.782880068 CEST	58297	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.782897949 CEST	443	58297	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.803694963 CEST	443	58293	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.804075956 CEST	58293	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.804141045 CEST	443	58293	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.804475069 CEST	58293	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.804491043 CEST	443	58293	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.859918118 CEST	443	58294	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.860238075 CEST	58294	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.860255957 CEST	443	58294	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.860682011 CEST	58294	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.860687971 CEST	443	58294	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.932678938 CEST	443	58293	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.932759047 CEST	443	58293	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.932914972 CEST	58293	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.932915926 CEST	58293	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.932915926 CEST	58293	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.934912920 CEST	58298	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.934947014 CEST	443	58298	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.935101032 CEST	58298	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.935200930 CEST	58298	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.935209036 CEST	443	58298	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.982147932 CEST	443	58295	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.982848883 CEST	58295	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.982848883 CEST	58295	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.982877970 CEST	443	58295	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.982903004 CEST	443	58295	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.992470026 CEST	443	58294	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.992548943 CEST	443	58294	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.992762089 CEST	58294	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.992762089 CEST	58294	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.994776964 CEST	58299	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.994826078 CEST	443	58299	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.994906902 CEST	58294	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.994931936 CEST	443	58294	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:06.994961977 CEST	58299	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.995110035 CEST	58299	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:06.995126009 CEST	443	58299	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:07.122620106 CEST	443	58295	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:07.122776985 CEST	443	58295	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:07.122955084 CEST	58295	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:07.122956038 CEST	58295	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:07.123073101 CEST	58295	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:07.123097897 CEST	443	58295	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:07.126236916 CEST	58300	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:07.126290083 CEST	443	58300	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:07.126492977 CEST	58300	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:07.126492977 CEST	58300	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:07.126530886 CEST	443	58300	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:07.172919035 CEST	443	58296	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:07.173826933 CEST	58296	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:07.173826933 CEST	58296	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:07.173861027 CEST	443	58296	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:07.173866034 CEST	443	58296	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:07.234289885 CEST	58293	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:07.234328985 CEST	443	58293	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:07.300698042 CEST	443	58296	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:07.300734043 CEST	443	58296	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:07.300786972 CEST	443	58296	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:07.301044941 CEST	58296	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:07.301045895 CEST	58296	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:07.301696062 CEST	58296	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:07.301714897 CEST	443	58296	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:07.304748058 CEST	58301	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:07.304840088 CEST	443	58301	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:07.305285931 CEST	58301	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:07.305286884 CEST	58301	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:07.305370092 CEST	443	58301	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:07.516998053 CEST	443	58297	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:07.519138098 CEST	58297	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:07.519139051 CEST	58297	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:07.519190073 CEST	443	58297	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:07.519211054 CEST	443	58297	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:07.646990061 CEST	443	58297	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:07.647126913 CEST	443	58297	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:07.647187948 CEST	58297	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:07.647280931 CEST	58297	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:07.647310019 CEST	443	58297	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:07.647335052 CEST	58297	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:07.647344112 CEST	443	58297	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:07.653419018 CEST	58302	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:07.653510094 CEST	443	58302	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:07.653597116 CEST	58302	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:07.653769970 CEST	58302	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:07.653806925 CEST	443	58302	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:07.669725895 CEST	443	58298	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:07.670057058 CEST	58298	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:07.670089006 CEST	443	58298	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:07.671123981 CEST	58298	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:07.671132088 CEST	443	58298	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:07.732584000 CEST	443	58299	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:07.733597040 CEST	58299	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:07.733661890 CEST	443	58299	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:07.734922886 CEST	58299	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:07.734937906 CEST	443	58299	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:07.800934076 CEST	443	58298	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:07.800972939 CEST	443	58298	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:07.801028013 CEST	443	58298	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:07.801085949 CEST	58298	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:07.801127911 CEST	58298	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:07.801595926 CEST	58298	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:07.801625013 CEST	443	58298	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:07.801640987 CEST	58298	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:07.801651001 CEST	443	58298	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:07.808839083 CEST	58303	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:07.808933020 CEST	443	58303	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:07.808995962 CEST	58303	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:07.809345007 CEST	58303	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:07.809381962 CEST	443	58303	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:07.862220049 CEST	443	58299	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:07.862377882 CEST	443	58299	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:07.862447977 CEST	58299	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:07.862730980 CEST	58299	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:07.862797022 CEST	443	58299	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:07.862838030 CEST	58299	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:07.862859964 CEST	443	58299	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:07.871552944 CEST	58304	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:07.871589899 CEST	443	58304	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:07.871665001 CEST	58304	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:07.872256994 CEST	58304	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:07.872283936 CEST	443	58304	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:07.878180027 CEST	443	58300	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:07.878998995 CEST	58300	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:07.879080057 CEST	443	58300	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:07.880090952 CEST	58300	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:07.880106926 CEST	443	58300	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:08.010231972 CEST	443	58300	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:08.010318995 CEST	443	58300	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:08.010376930 CEST	58300	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:08.010404110 CEST	443	58300	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:08.010431051 CEST	443	58300	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:08.010477066 CEST	58300	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:08.011198997 CEST	58300	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:08.011218071 CEST	443	58300	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:08.011229038 CEST	58300	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:08.011234045 CEST	443	58300	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:08.019913912 CEST	58305	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:08.019975901 CEST	443	58305	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:08.020030022 CEST	58305	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:08.020626068 CEST	58305	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:08.020649910 CEST	443	58305	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:08.037600040 CEST	443	58301	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:08.038842916 CEST	58301	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:08.038886070 CEST	443	58301	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:08.039793968 CEST	58301	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:08.039805889 CEST	443	58301	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:08.168982983 CEST	443	58301	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:08.169084072 CEST	443	58301	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:08.169133902 CEST	58301	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:08.169642925 CEST	58301	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:08.169668913 CEST	443	58301	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:08.179780960 CEST	58306	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:08.179816961 CEST	443	58306	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:08.179881096 CEST	58306	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:08.180212021 CEST	58306	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:08.180227041 CEST	443	58306	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:08.429240942 CEST	443	58302	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:08.430394888 CEST	58302	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:08.430425882 CEST	443	58302	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:08.431756020 CEST	58302	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:08.431761026 CEST	443	58302	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:08.537630081 CEST	443	58303	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:08.538161993 CEST	58303	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:08.538213968 CEST	443	58303	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:08.538645983 CEST	58303	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:08.538656950 CEST	443	58303	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:08.608400106 CEST	443	58302	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:08.608720064 CEST	443	58302	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:08.608808041 CEST	58302	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:08.608906031 CEST	58302	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:08.608906031 CEST	58302	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:08.608948946 CEST	443	58302	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:08.608974934 CEST	443	58302	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:08.611907005 CEST	58307	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:08.611959934 CEST	443	58307	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:08.612052917 CEST	58307	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:08.612184048 CEST	58307	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:08.612206936 CEST	443	58307	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:08.612632036 CEST	443	58304	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:08.613049030 CEST	58304	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:08.613138914 CEST	443	58304	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:08.613490105 CEST	58304	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:08.613504887 CEST	443	58304	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:08.668175936 CEST	443	58303	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:08.668342113 CEST	443	58303	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:08.668539047 CEST	58303	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:08.668680906 CEST	58303	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:08.668680906 CEST	58303	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:08.668723106 CEST	443	58303	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:08.668754101 CEST	443	58303	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:08.672491074 CEST	58308	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:08.672591925 CEST	443	58308	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:08.672852039 CEST	58308	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:08.673209906 CEST	58308	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:08.673247099 CEST	443	58308	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:08.743071079 CEST	443	58304	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:08.743197918 CEST	443	58304	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:08.743352890 CEST	58304	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:08.743521929 CEST	58304	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:08.743521929 CEST	58304	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:08.743547916 CEST	443	58304	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:08.743560076 CEST	443	58304	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:08.746546030 CEST	58309	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:08.746602058 CEST	443	58309	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:08.746999025 CEST	58309	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:08.747256041 CEST	58309	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:08.747277021 CEST	443	58309	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:08.760843039 CEST	443	58305	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:08.762794971 CEST	58305	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:08.762852907 CEST	443	58305	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:08.763247967 CEST	58305	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:08.763259888 CEST	443	58305	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:08.894036055 CEST	443	58305	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:08.894309998 CEST	443	58305	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:08.894635916 CEST	58305	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:08.894690990 CEST	58305	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:08.894690990 CEST	58305	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:08.894706964 CEST	443	58305	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:08.894716024 CEST	443	58305	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:08.898250103 CEST	58310	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:08.898313046 CEST	443	58310	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:08.898479939 CEST	58310	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:08.898782969 CEST	58310	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:08.898806095 CEST	443	58310	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:08.943964958 CEST	443	58306	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:08.945010900 CEST	58306	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:08.945061922 CEST	443	58306	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:08.945837975 CEST	58306	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:08.945847034 CEST	443	58306	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:09.079122066 CEST	443	58306	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:09.079222918 CEST	443	58306	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:09.079265118 CEST	443	58306	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:09.079298019 CEST	58306	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:09.079344988 CEST	58306	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:09.079808950 CEST	58306	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:09.079808950 CEST	58306	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:09.079832077 CEST	443	58306	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:09.079847097 CEST	443	58306	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:09.084760904 CEST	58311	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:09.084796906 CEST	443	58311	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:09.085026979 CEST	58311	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:09.085299015 CEST	58311	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:09.085311890 CEST	443	58311	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:09.354716063 CEST	443	58307	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:09.355798960 CEST	58307	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:09.355832100 CEST	443	58307	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:09.356312990 CEST	58307	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:09.356318951 CEST	443	58307	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:09.405508995 CEST	443	58308	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:09.406238079 CEST	58308	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:09.406269073 CEST	443	58308	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:09.407488108 CEST	58308	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:09.407495022 CEST	443	58308	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:09.488786936 CEST	443	58307	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:09.488869905 CEST	443	58307	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:09.489036083 CEST	58307	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:09.489244938 CEST	58307	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:09.489244938 CEST	58307	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:09.489264965 CEST	443	58307	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:09.489276886 CEST	443	58307	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:09.491347075 CEST	443	58309	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:09.492559910 CEST	58312	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:09.492593050 CEST	443	58312	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:09.492652893 CEST	58312	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:09.493187904 CEST	58309	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:09.493202925 CEST	443	58309	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:09.493946075 CEST	58309	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:09.493951082 CEST	443	58309	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:09.494172096 CEST	58312	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:09.494184017 CEST	443	58312	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:09.535635948 CEST	443	58308	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:09.535670996 CEST	443	58308	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:09.535722017 CEST	443	58308	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:09.535753012 CEST	58308	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:09.535792112 CEST	58308	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:09.536062956 CEST	58308	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:09.536062956 CEST	58308	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:09.536083937 CEST	443	58308	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:09.536099911 CEST	443	58308	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:09.539244890 CEST	58313	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:09.539277077 CEST	443	58313	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:09.540328026 CEST	58313	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:09.540503025 CEST	58313	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:09.540522099 CEST	443	58313	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:09.618727922 CEST	443	58310	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:09.619645119 CEST	58310	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:09.619684935 CEST	443	58310	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:09.619884014 CEST	443	58309	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:09.620039940 CEST	443	58309	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:09.620171070 CEST	58310	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:09.620178938 CEST	443	58310	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:09.620214939 CEST	58309	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:09.621134043 CEST	58309	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:09.621154070 CEST	443	58309	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:09.621182919 CEST	58309	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:09.621190071 CEST	443	58309	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:09.625518084 CEST	58314	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:09.625557899 CEST	443	58314	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:09.625910997 CEST	58314	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:09.626116037 CEST	58314	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:09.626131058 CEST	443	58314	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:09.748455048 CEST	443	58310	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:09.748492002 CEST	443	58310	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:09.748547077 CEST	443	58310	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:09.748564005 CEST	58310	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:09.748644114 CEST	58310	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:09.748789072 CEST	58310	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:09.748789072 CEST	58310	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:09.748837948 CEST	443	58310	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:09.748874903 CEST	443	58310	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:09.751693964 CEST	58315	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:09.751724005 CEST	443	58315	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:09.751786947 CEST	58315	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:09.751912117 CEST	58315	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:09.751918077 CEST	443	58315	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:09.825064898 CEST	443	58311	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:09.825459957 CEST	58311	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:09.825496912 CEST	443	58311	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:09.825989008 CEST	58311	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:09.826004982 CEST	443	58311	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:09.957989931 CEST	443	58311	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:09.958070993 CEST	443	58311	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:09.958122969 CEST	58311	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:09.961802959 CEST	58311	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:09.961853027 CEST	443	58311	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:09.961874962 CEST	58311	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:09.961884022 CEST	443	58311	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:09.974673986 CEST	58316	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:09.974735022 CEST	443	58316	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:09.974801064 CEST	58316	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:09.981545925 CEST	58316	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:09.981584072 CEST	443	58316	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:10.247770071 CEST	443	58312	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:10.248713017 CEST	58312	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:10.248745918 CEST	443	58312	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:10.249727964 CEST	58312	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:10.249736071 CEST	443	58312	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:10.277293921 CEST	443	58313	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:10.277961016 CEST	58313	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:10.277987957 CEST	443	58313	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:10.278594017 CEST	58313	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:10.278599024 CEST	443	58313	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:10.378427029 CEST	443	58314	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:10.378932953 CEST	58314	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:10.378954887 CEST	443	58314	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:10.379565001 CEST	58314	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:10.379569054 CEST	443	58314	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:10.380836010 CEST	443	58312	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:10.380870104 CEST	443	58312	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:10.380918026 CEST	58312	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:10.380923033 CEST	443	58312	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:10.380964041 CEST	58312	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:10.381402016 CEST	58312	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:10.381413937 CEST	443	58312	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:10.381426096 CEST	58312	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:10.381429911 CEST	443	58312	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:10.385915041 CEST	58317	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:10.385951042 CEST	443	58317	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:10.386034966 CEST	58317	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:10.386198997 CEST	58317	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:10.386210918 CEST	443	58317	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:10.409117937 CEST	443	58313	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:10.409183025 CEST	443	58313	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:10.409385920 CEST	58313	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:10.409385920 CEST	58313	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:10.409509897 CEST	58313	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:10.409528971 CEST	443	58313	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:10.413249969 CEST	58318	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:10.413294077 CEST	443	58318	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:10.413364887 CEST	58318	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:10.413527966 CEST	58318	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:10.413542032 CEST	443	58318	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:10.496174097 CEST	443	58315	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:10.497016907 CEST	58315	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:10.497029066 CEST	443	58315	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:10.497697115 CEST	58315	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:10.497706890 CEST	443	58315	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:10.628401995 CEST	443	58315	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:10.628432989 CEST	443	58315	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:10.628506899 CEST	443	58315	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:10.629355907 CEST	58315	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:10.629355907 CEST	58315	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:10.629355907 CEST	58315	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:10.629355907 CEST	58315	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:10.632483959 CEST	58319	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:10.632524967 CEST	443	58319	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:10.632684946 CEST	58319	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:10.633805037 CEST	58319	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:10.633826971 CEST	443	58319	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:10.711390972 CEST	443	58316	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:10.712452888 CEST	58316	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:10.712454081 CEST	58316	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:10.712502003 CEST	443	58316	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:10.712524891 CEST	443	58316	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:10.840817928 CEST	443	58316	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:10.840851068 CEST	443	58316	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:10.840904951 CEST	443	58316	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:10.841187000 CEST	58316	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:10.841370106 CEST	58316	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:10.841399908 CEST	443	58316	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:10.841455936 CEST	58316	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:10.841464996 CEST	443	58316	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:10.846167088 CEST	58320	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:10.846201897 CEST	443	58320	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:10.846268892 CEST	58320	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:10.846698999 CEST	58320	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:10.846709967 CEST	443	58320	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:10.938195944 CEST	58315	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:10.938227892 CEST	443	58315	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:11.128122091 CEST	443	58317	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:11.128829956 CEST	58317	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:11.128858089 CEST	443	58317	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:11.129273891 CEST	58317	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:11.129280090 CEST	443	58317	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:11.147641897 CEST	443	58318	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:11.148184061 CEST	58318	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:11.148236036 CEST	443	58318	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:11.148618937 CEST	58318	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:11.148628950 CEST	443	58318	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:11.259572983 CEST	443	58317	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:11.259704113 CEST	443	58317	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:11.259898901 CEST	58317	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:11.260108948 CEST	58317	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:11.260128021 CEST	443	58317	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:11.260154963 CEST	58317	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:11.260160923 CEST	443	58317	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:11.263381004 CEST	58321	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:11.263451099 CEST	443	58321	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:11.263649940 CEST	58321	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:11.263964891 CEST	58321	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:11.263983011 CEST	443	58321	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:11.278913975 CEST	443	58318	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:11.278985977 CEST	443	58318	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:11.279094934 CEST	443	58318	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:11.279242992 CEST	58318	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:11.279242992 CEST	58318	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:11.279525042 CEST	58318	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:11.279573917 CEST	443	58318	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:11.282105923 CEST	58322	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:11.282152891 CEST	443	58322	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:11.282345057 CEST	58322	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:11.282681942 CEST	58322	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:11.282706022 CEST	443	58322	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:11.351880074 CEST	443	58319	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:11.352777004 CEST	58319	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:11.352835894 CEST	443	58319	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:11.352971077 CEST	58319	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:11.352982998 CEST	443	58319	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:11.480779886 CEST	443	58319	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:11.480874062 CEST	443	58319	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:11.481070042 CEST	58319	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:11.481148958 CEST	58319	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:11.481148958 CEST	58319	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:11.481193066 CEST	443	58319	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:11.481224060 CEST	443	58319	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:11.484097004 CEST	58323	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:11.484160900 CEST	443	58323	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:11.484261036 CEST	58323	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:11.484492064 CEST	58323	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:11.484508038 CEST	443	58323	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:11.581408978 CEST	443	58320	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:11.582101107 CEST	58320	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:11.582113028 CEST	443	58320	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:11.582597017 CEST	58320	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:11.582606077 CEST	443	58320	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:11.712713957 CEST	443	58320	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:11.712764025 CEST	443	58320	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:11.712825060 CEST	443	58320	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:11.712964058 CEST	58320	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:11.713054895 CEST	58320	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:11.713054895 CEST	58320	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:11.713071108 CEST	443	58320	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:11.713080883 CEST	443	58320	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:11.716048956 CEST	58324	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:11.716140985 CEST	443	58324	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:11.716221094 CEST	58324	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:11.716357946 CEST	58324	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:11.716392040 CEST	443	58324	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:11.993721962 CEST	443	58321	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:11.994249105 CEST	58321	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:11.994277954 CEST	443	58321	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:11.994851112 CEST	58321	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:11.994856119 CEST	443	58321	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:12.021213055 CEST	443	58322	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:12.021811008 CEST	58322	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:12.021840096 CEST	443	58322	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:12.022368908 CEST	58322	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:12.022384882 CEST	443	58322	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:12.125283003 CEST	443	58321	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:12.125472069 CEST	443	58321	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:12.125538111 CEST	58321	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:12.125766039 CEST	58321	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:12.125790119 CEST	443	58321	13.107.246.45	192.168.2.4
Oct 25, 2024 08:22:12.125803947 CEST	58321	443	192.168.2.4	13.107.246.45
Oct 25, 2024 08:22:12.125808954 CEST	443	58321	13.107.246.45	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 25, 2024 08:20:47.628134012 CEST	53	54177	1.1.1.1	192.168.2.4
Oct 25, 2024 08:20:47.949712992 CEST	53	50455	1.1.1.1	192.168.2.4
Oct 25, 2024 08:20:49.206182957 CEST	53	49862	1.1.1.1	192.168.2.4
Oct 25, 2024 08:20:51.531388998 CEST	62348	53	192.168.2.4	1.1.1.1
Oct 25, 2024 08:20:51.531481981 CEST	58777	53	192.168.2.4	1.1.1.1
Oct 25, 2024 08:20:51.807785988 CEST	53	58777	1.1.1.1	192.168.2.4
Oct 25, 2024 08:20:51.807813883 CEST	53	62348	1.1.1.1	192.168.2.4
Oct 25, 2024 08:20:57.945199013 CEST	138	138	192.168.2.4	192.168.2.255
Oct 25, 2024 08:21:06.258162022 CEST	53	64488	1.1.1.1	192.168.2.4
Oct 25, 2024 08:21:25.273308039 CEST	53	52508	1.1.1.1	192.168.2.4
Oct 25, 2024 08:21:29.320081949 CEST	53	61362	1.1.1.1	192.168.2.4
Oct 25, 2024 08:21:47.338057041 CEST	53	56652	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 25, 2024 08:20:51.531388998 CEST	192.168.2.4	1.1.1.1	0x72d	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 08:20:51.531481981 CEST	192.168.2.4	1.1.1.1	0x4cd2	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 25, 2024 08:20:51.807785988 CEST	1.1.1.1	192.168.2.4	0x4cd2	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 25, 2024 08:20:51.807813883 CEST	1.1.1.1	192.168.2.4	0x72d	No error (0)	www.google.com		172.217.16.196	A (IP address)	IN (0x0001)	false
Oct 25, 2024 08:21:05.042397976 CEST	1.1.1.1	192.168.2.4	0x423f	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 08:21:05.042397976 CEST	1.1.1.1	192.168.2.4	0x423f	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 25, 2024 08:21:21.370405912 CEST	1.1.1.1	192.168.2.4	0x9af9	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 08:21:21.370405912 CEST	1.1.1.1	192.168.2.4	0x9af9	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 25, 2024 08:21:33.823426008 CEST	1.1.1.1	192.168.2.4	0x91ef	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 08:21:33.823426008 CEST	1.1.1.1	192.168.2.4	0x91ef	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 25, 2024 08:22:01.103677034 CEST	1.1.1.1	192.168.2.4	0x1142	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 08:22:01.103677034 CEST	1.1.1.1	192.168.2.4	0x1142	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

fs.microsoft.com

slscr.update.microsoft.com

otelrules.azureedge.net

152.199.19.160

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	152.199.19.160	80	2128	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 08:20:49.535561085 CEST	429	OUT	GET / HTTP/1.1 Host: 152.199.19.160 Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 25, 2024 08:20:50.344297886 CEST	479	IN	HTTP/1.1 404 Not Found Content-Type: text/html Content-Length: 345 Date: Fri, 25 Oct 2024 06:20:50 GMT Server: ECLF (lhc/7937) Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0a 20 20 20 20 20 20 20 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 09 3c 2f 68 65 61 64 3e 0a 09 3c 62 6f 64 79 3e 0a 09 09 3c 68 31 3e 34 30 34 20 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 09 3c 2f 62 6f 64 79 3e 0a 3c [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head><title>404 - Not Found</title></head><body><h1>404 - Not Found</h1></body></html>
Oct 25, 2024 08:20:50.387805939 CEST	372	OUT	GET /favicon.ico HTTP/1.1 Host: 152.199.19.160 Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://152.199.19.160/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 25, 2024 08:20:50.616627932 CEST	479	IN	HTTP/1.1 404 Not Found Content-Type: text/html Content-Length: 345 Date: Fri, 25 Oct 2024 06:20:50 GMT Server: ECLF (lhc/7937) Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0a 20 20 20 20 20 20 20 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 09 3c 2f 68 65 61 64 3e 0a 09 3c 62 6f 64 79 3e 0a 09 09 3c 68 31 3e 34 30 34 20 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 09 3c 2f 62 6f 64 79 3e 0a 3c [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head><title>404 - Not Found</title></head><body><h1>404 - Not Found</h1></body></html>
Oct 25, 2024 08:21:35.624512911 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49735	152.199.19.160	80	2128	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 25, 2024 08:21:34.546523094 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49740	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:20:53 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-25 06:20:53 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=210249 Date: Fri, 25 Oct 2024 06:20:53 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49741	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:20:54 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-25 06:20:54 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=210248 Date: Fri, 25 Oct 2024 06:20:54 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-25 06:20:54 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49742	4.175.87.197	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:03 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Opw6z62P+8Nmt9P&MD=zxVWrRUS HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-25 06:21:03 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: ba77dfaa-6f90-4efb-87a0-d6f87769a580 MS-RequestId: 2d62986c-e1a2-452d-91b0-32fac70474f6 MS-CV: a/jaF3aSx0iQhWoj.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 25 Oct 2024 06:21:02 GMT Connection: close Content-Length: 24490
2024-10-25 06:21:03 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-25 06:21:03 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.4	58129	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:34 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:34 UTC	561	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:34 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Wed, 23 Oct 2024 06:30:03 GMT ETag: "0x8DCF32C20D7262E" x-ms-request-id: 39f98116-901e-0015-0fb5-25b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062134Z-16849878b788tnsxzb2smucwdc00000008wg000000005tc7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:34 UTC	15823	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-25 06:21:34 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <S T="1" F="0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L>
2024-10-25 06:21:34 UTC	16384	IN	Data Raw: 3c 53 20 54 3d 22 33 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d Data Ascii: <S T="3" /> </T> <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-
2024-10-25 06:21:35 UTC	16384	IN	Data Raw: 6e 74 73 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a Data Ascii: nts" /> </C> <C T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" />
2024-10-25 06:21:35 UTC	16384	IN	Data Raw: 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: </S> <C T="U32" I="0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32"
2024-10-25 06:21:35 UTC	16384	IN	Data Raw: 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 Data Ascii: _Count"> <C> <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S
2024-10-25 06:21:35 UTC	16384	IN	Data Raw: 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 Data Ascii: <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3"
2024-10-25 06:21:35 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 Data Ascii: </L> <R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false
2024-10-25 06:21:35 UTC	16384	IN	Data Raw: 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: T="B" /> </R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" />
2024-10-25 06:21:35 UTC	16384	IN	Data Raw: 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: O> </F> <F T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.4	58133	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:37 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:37 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:37 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 6b50d5b8-301e-005d-5751-26e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062137Z-17c5cb586f6qkkscezt8hb00a000000002b00000000028km x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:37 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.4	58134	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:37 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:37 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:37 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: fdb61705-b01e-0001-2f09-2246e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062137Z-16849878b785f8wh85a0w3ennn00000008r000000000de80 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:37 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.4	58132	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:37 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:37 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:37 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 1a9c8bfd-301e-0000-1fee-25eecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062137Z-16849878b78jfqwd1dsrhqg3aw00000008t000000000pgtd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:37 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.4	58131	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:37 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:37 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:37 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 52fc638d-b01e-0070-36c5-201cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062137Z-16849878b78smng4k6nq15r6s400000001rg000000002qeq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:37 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.4	58130	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:37 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:37 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:37 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 2f084f0e-501e-0029-2021-26d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062137Z-r197bdfb6b4cz6xrsdncwtgzd40000000re0000000000n92 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:37 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.4	58135	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:38 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:38 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:38 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 7aa3dd97-101e-005a-6a20-26882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062138Z-r197bdfb6b4hdk8h12qtxfwscn00000000vg000000001sh4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:38 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.4	58137	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:38 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:38 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:38 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 4755be7f-e01e-0052-062b-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062138Z-16849878b78bcpfn2qf7sm6hsn00000001s0000000008k3q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:38 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.4	58139	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:38 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:38 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:38 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: b0d76b6d-d01e-002b-3e84-2525fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062138Z-16849878b78k46f8kzwxznephs00000008kg00000000p6g2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:38 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.4	58138	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:38 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:38 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:38 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: d2ec1471-a01e-0032-1827-261949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062138Z-r197bdfb6b4nmq95umz1k4bcyn0000000100000000006e86 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:38 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	58136	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:38 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:38 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:38 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: e5fe76b8-601e-0050-2e06-262c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062138Z-17c5cb586f62blg5ss55p9d6fn00000000mg000000009gkc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:38 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	58141	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:39 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:39 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:39 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 0fe0dd21-c01e-0066-771c-26a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062139Z-16849878b78j7llf5vkyvvcehs000000019g0000000032um x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 06:21:39 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	58140	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:39 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:39 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:39 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 3c9c0adf-d01e-0028-0c96-257896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062139Z-16849878b78j5kdg3dndgqw0vg00000001y00000000028mc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:39 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	58143	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:39 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:39 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:39 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: d7788b78-601e-0084-2f37-266b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062139Z-16849878b78c5zx4gw8tcga1b400000008r00000000099t3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:39 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	58142	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:39 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:39 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:39 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 1b2fb3ba-201e-0033-65ce-20b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062139Z-16849878b7898p5f6vryaqvp5800000000yg00000000a0fc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:39 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	58144	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:39 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:39 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:39 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 7c0b2bc5-f01e-00aa-35ef-248521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062139Z-15b8d89586fx2hlt035xdehq580000000frg000000009dre x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:39 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	58145	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:40 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:40 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:40 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 2fd6bd5d-d01e-007a-394f-26f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062140Z-16849878b78c5zx4gw8tcga1b400000008m000000000mh98 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 06:21:40 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	58146	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:40 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:40 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:40 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 3edebaab-e01e-0033-21c8-214695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062140Z-16849878b78jfqwd1dsrhqg3aw00000008t000000000pgws x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:40 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	58148	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:40 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:40 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:40 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: ec40f21c-901e-0067-494d-22b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062140Z-16849878b78lhh9t0fb3392enw00000008rg000000006br4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:40 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	58147	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:40 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:40 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:40 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 4cd68789-d01e-0017-448e-21b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062140Z-16849878b785f8wh85a0w3ennn00000008pg00000000k5bn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:40 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	58149	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:40 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:40 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:40 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: e7bd3bd0-f01e-003c-42e3-258cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062140Z-16849878b786vsxz21496wc2qn00000008u000000000hgtg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:40 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	58150	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:41 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:41 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:41 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: b140b4a4-501e-000a-80f9-240180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062141Z-15b8d89586flzzks5bs37v2b9000000004eg0000000028cg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:41 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	58151	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:41 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:41 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:41 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 630b92e5-101e-00a2-203d-269f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062141Z-r197bdfb6b48pcqqxhenwd2uz800000000tg00000000d230 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:41 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	58153	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:41 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:41 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:41 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 9e6b2b63-d01e-008e-7443-26387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062141Z-17c5cb586f62blg5ss55p9d6fn00000000h00000000091yg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:41 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	58152	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:41 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:41 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:41 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: bbff353d-b01e-005c-270e-264c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062141Z-16849878b785jrf8dn0d2rczaw00000001d0000000000gc0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:41 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	58154	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:41 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:41 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:41 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 4af8c3a5-e01e-0033-1562-264695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062141Z-16849878b785dznd7xpawq9gcn00000001ng0000000003qd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 06:21:41 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	58156	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:41 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:42 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:41 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 3cf1b782-701e-0001-32e5-21b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062141Z-16849878b78lhh9t0fb3392enw00000008pg00000000ancz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:42 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	58157	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:41 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:42 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:41 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 6ff76e76-001e-002b-21c5-2099f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062141Z-16849878b78jfqwd1dsrhqg3aw00000008xg000000007y6s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:42 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	58158	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:41 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:42 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:41 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 1290ce53-d01e-002b-7905-2225fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062141Z-16849878b78j5kdg3dndgqw0vg00000001s000000000kzsv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:42 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	58159	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:41 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:42 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:42 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 56a14f83-001e-002b-1ff2-2499f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062142Z-r197bdfb6b4lbgfqwkqbrm672s00000002qg000000000fq1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:42 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	58160	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:41 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:42 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:42 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: a89f9527-e01e-0033-5af4-244695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062142Z-15b8d89586fvk4kmbg8pf84y880000000120000000004x5e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 06:21:42 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	58155	4.175.87.197	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:42 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Opw6z62P+8Nmt9P&MD=zxVWrRUS HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-25 06:21:42 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: ea3bb2ec-7974-4c0b-bf50-dc3ffe3f355b MS-RequestId: 6cb107c2-4304-4c0f-b093-52392584d990 MS-CV: eDHLmFH4Z0mUL8gC.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 25 Oct 2024 06:21:41 GMT Connection: close Content-Length: 30005
2024-10-25 06:21:42 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-10-25 06:21:42 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	58161	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:42 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:42 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:42 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: c4337264-b01e-0070-640b-221cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062142Z-16849878b78rjhv97f3nhawr7s00000008t0000000007h2w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:42 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	58162	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:42 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:42 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:42 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 1f9c3bb8-d01e-0014-220b-22ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062142Z-16849878b785jrf8dn0d2rczaw000000019000000000a5q2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:42 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	58163	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:42 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:42 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:42 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 46af3d48-701e-0032-6627-21a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062142Z-16849878b78nx5sne3fztmu6xc000000014g0000000067g9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:42 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	58165	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:42 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:43 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:42 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: efc778c0-f01e-0052-4de5-219224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062142Z-16849878b785jrf8dn0d2rczaw000000016g00000000gbv0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:43 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	58166	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:43 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:43 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:43 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 21f78716-701e-005c-7b46-26bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062143Z-r197bdfb6b49q4951yb663v3ds000000013g00000000bru3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:43 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	58168	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:43 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:43 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:43 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 3f3879b0-501e-0035-0b40-22c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062143Z-16849878b787sbpl0sv29sm89s00000008u000000000hfnc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:43 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	58167	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:43 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:43 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:43 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 42f5c72c-c01e-00a1-6643-267e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062143Z-16849878b78x6gn56mgecg60qc00000001y00000000098ac x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 06:21:43 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	58169	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:43 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:43 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:43 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 13d0f17b-b01e-0053-80f4-24cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062143Z-15b8d89586fhl2qtatrz3vfkf00000000620000000006yfk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:43 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	58170	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:44 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:44 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:44 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: de733a63-101e-00a2-1415-269f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062144Z-r197bdfb6b49q4951yb663v3ds000000012g00000000cywm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:44 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	58171	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:44 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:44 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:44 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: e5dab064-101e-0046-04f5-2491b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062144Z-r197bdfb6b4tq6ldv3s2dcykm800000002n000000000g38c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:44 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	58172	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:44 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:44 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:44 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 99f07890-301e-0051-29d2-2538bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062144Z-16849878b78jfqwd1dsrhqg3aw00000008w000000000bd82 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:44 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	58173	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:44 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:44 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:44 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 51ccb76b-001e-0049-0a37-265bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062144Z-16849878b786vsxz21496wc2qn0000000900000000001r97 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 06:21:44 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	58164	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:44 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:44 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:44 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 27632888-301e-0096-61d8-21e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062144Z-16849878b787c9z7hb8u9yysp00000000900000000001kta x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:44 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	58174	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:45 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:45 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:45 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: d4d27aa7-601e-0002-1812-22a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062145Z-16849878b78gvgmlcfru6nuc5400000008sg00000000ascf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:45 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	58176	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:45 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:45 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:45 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 352988b4-001e-0065-3a25-260b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062145Z-17c5cb586f6w4mfs5xcmnrny6n00000001ng0000000053nu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:45 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	58175	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:45 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:45 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:45 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 809859d7-601e-00ab-6828-2666f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062145Z-17c5cb586f6mhqqb91r8trf2c800000000xg000000009vn1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:45 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	58177	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:45 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:45 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:45 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 4a7bd2a8-301e-0096-209e-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062145Z-16849878b78j5kdg3dndgqw0vg00000001s000000000kzxt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 06:21:45 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	58178	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:45 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:45 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:45 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 34cbbb6f-001e-0046-0fdf-25da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062145Z-16849878b78k8q5pxkgux3mbgg00000008t0000000008ruf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 06:21:45 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	58181	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:46 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:46 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:46 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 03f0aa2d-d01e-007a-29f2-24f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062146Z-15b8d89586f5s5nz3ffrgxn5ac00000000vg000000001ft9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 06:21:46 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	58179	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:46 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:46 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:46 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 94ed83ec-801e-0083-4bf2-24f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062146Z-15b8d89586fwzdd8urmg0p1ebs0000000ac000000000a660 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:46 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	58180	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:46 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:46 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:46 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 531fb3e5-001e-00a2-2356-23d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062146Z-r197bdfb6b4cz6xrsdncwtgzd40000000rag000000004vaa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:46 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	58182	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:46 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:46 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:46 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 26e7cda7-e01e-001f-32f8-251633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062146Z-16849878b787c9z7hb8u9yysp000000008v000000000gwfy x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:46 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	58183	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:46 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:46 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:46 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: d13b9d4f-c01e-0014-770d-26a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062146Z-17c5cb586f6qt228zy1nuwhy2g000000026g000000007xkd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:46 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	58185	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:47 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:47 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:47 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 1c275e9e-901e-0048-342c-26b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062147Z-17c5cb586f67hhlz1ecw6yxtp000000002dg000000008fzb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:47 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	58184	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:47 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:47 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:47 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 90538902-201e-0096-67fc-25ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062147Z-15b8d89586fmhkw429ba5n22m800000001e0000000009w1q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:47 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	58186	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:47 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:47 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:47 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: e574f622-301e-0052-4beb-2565d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062147Z-16849878b786lft2mu9uftf3y400000001c0000000009zrn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:47 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	58187	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:47 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:47 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:47 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 79657049-a01e-0032-1dac-241949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062147Z-15b8d89586flspj6y6m5fk442w00000005x000000000657f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:47 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	58188	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:47 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:47 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:47 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: c1ca1df0-401e-0029-1e3a-269b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062147Z-17c5cb586f67hhlz1ecw6yxtp000000002fg0000000054yz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:47 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	58190	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:48 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:48 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:48 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: c1144745-701e-0098-7f2c-26395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062148Z-17c5cb586f6qs7hge7b080kmr0000000023g0000000060ya x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:48 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	58192	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:48 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:48 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:48 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 7842422a-e01e-003c-05ee-25c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062148Z-16849878b787c9z7hb8u9yysp000000008wg00000000a4xu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:48 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	58191	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:48 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:48 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:48 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 28b65c2d-201e-0003-2d3f-26f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062148Z-17c5cb586f67hhlz1ecw6yxtp000000002bg00000000bkeu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:48 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	58193	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:48 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:48 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:48 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: ffa56774-c01e-007a-6c38-26b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062148Z-16849878b78lhh9t0fb3392enw00000008u0000000000nae x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:48 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	58194	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:48 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:48 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:48 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: c0884099-101e-0046-3a40-2291b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062148Z-16849878b78k8q5pxkgux3mbgg00000008r000000000f72g x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:48 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	58196	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:49 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:49 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:49 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: d9732123-901e-007b-1098-25ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062149Z-15b8d89586fhl2qtatrz3vfkf0000000064g000000003t1w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:49 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	58197	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:49 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:49 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:49 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: efcdf68a-a01e-0084-49f2-249ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062149Z-15b8d89586ffsjj9qb0gmb1stn0000000490000000007327 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:49 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	58195	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:49 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:49 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:49 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: ac69ef67-e01e-001f-7714-221633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062149Z-16849878b78x6gn56mgecg60qc00000001wg00000000evte x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:49 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	58199	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:49 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:49 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:49 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 096df01f-c01e-0066-45fd-24a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062149Z-r197bdfb6b4hdk8h12qtxfwscn00000000w00000000019u8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 06:21:49 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	58198	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:49 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:49 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:49 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: fa910cef-e01e-003c-72dd-21c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062149Z-16849878b785jrf8dn0d2rczaw00000001b00000000054r6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:49 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	58200	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:50 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:50 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:50 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 4fea5f70-201e-0071-57f4-24ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062150Z-r197bdfb6b429k2s6br3k49qn40000000670000000008vfu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:50 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	58202	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:50 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:50 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:50 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: a2526616-701e-0050-123d-266767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062150Z-17c5cb586f6hhlf5mrwgq3erx8000000017g0000000034p1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:50 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	58201	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:50 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:50 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:50 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 135f94f0-d01e-002b-2a55-2225fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062150Z-16849878b78hz7zj8u0h2zng1400000008w000000000bwyp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 06:21:50 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	58203	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:50 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:50 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:50 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: f6a2cc2d-401e-0015-3796-250e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062150Z-16849878b785f8wh85a0w3ennn00000008vg000000002qb8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:50 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	58204	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:50 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:50 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:50 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: c52d6895-f01e-001f-0bd3-205dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062150Z-16849878b7898p5f6vryaqvp5800000000zg000000007an8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:50 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	58206	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:51 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:51 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:51 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: fd0e08e6-201e-0085-5f27-2634e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062151Z-r197bdfb6b4bq7nf8mnywhn9e0000000019g000000000vb9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:51 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	58205	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:51 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:51 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:51 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 4104ef10-001e-0046-6521-26da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062151Z-17c5cb586f677284pnx3kebuu40000000240000000009rz6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:51 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	58208	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:51 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:51 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:51 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: c6fd9367-401e-008c-7f80-2686c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062151Z-16849878b78bcpfn2qf7sm6hsn00000001s0000000008kfz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:51 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	58209	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:51 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:51 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:51 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: b96d8484-001e-005a-2cf4-24c3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062151Z-15b8d89586fxdh48qknu9dqk2g000000045g0000000020rb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:51 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	58207	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:51 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:51 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:51 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: bb28544f-801e-0047-7562-267265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062151Z-16849878b78k8q5pxkgux3mbgg00000008ug000000004vsv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 06:21:51 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	58211	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:52 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:52 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:52 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: aaf6fada-701e-0053-683a-223a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062152Z-16849878b7898p5f6vryaqvp580000000120000000001kgk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:52 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	58210	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:52 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:52 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:52 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 0eea03f1-d01e-0066-098a-21ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062152Z-16849878b78nx5sne3fztmu6xc000000012000000000d90z x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:52 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	58212	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:52 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:52 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:52 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 273a8d1a-001e-0034-0d8c-21dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062152Z-16849878b788tnsxzb2smucwdc00000008u000000000bfdc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:52 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	58213	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:52 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:52 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:52 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 7edb8da2-f01e-0099-33f3-249171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062152Z-15b8d89586fx2hlt035xdehq580000000fsg000000006skn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 06:21:52 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	58214	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:52 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:52 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:52 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 3529fceb-001e-0065-1625-260b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062152Z-16849878b78lhh9t0fb3392enw00000008sg000000003y87 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:52 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	58217	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:53 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:53 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:53 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 9f682ba9-701e-006f-730e-26afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062153Z-17c5cb586f6qt228zy1nuwhy2g000000028g000000003xgh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:53 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	58216	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:53 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:53 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:53 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 0243abe0-001e-0028-29fb-25c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062153Z-16849878b78gvgmlcfru6nuc5400000008pg00000000kes1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:53 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	58218	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:53 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:53 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:53 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: cd04a713-f01e-003f-7315-26d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062153Z-16849878b785f8wh85a0w3ennn00000008pg00000000k6b3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 06:21:53 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	58220	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:53 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:53 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:53 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: dd040750-801e-0083-62fe-25f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062153Z-17c5cb586f65j4snyp1hqk5z2s00000001dg000000008d5v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:53 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	58219	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:53 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:53 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:53 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 20049dc1-d01e-0014-1b33-22ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062153Z-16849878b78jfqwd1dsrhqg3aw00000008z00000000045wn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:53 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	58221	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:53 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:54 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:53 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 6129b0de-c01e-00a1-59fb-247e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062153Z-15b8d89586flspj6y6m5fk442w00000005w0000000007skd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:54 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	58222	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:53 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:54 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:53 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 2edde2c3-c01e-002b-176a-266e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062153Z-16849878b78x6gn56mgecg60qc000000022000000000021k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:54 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	58223	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:53 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:54 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:54 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 4faef820-a01e-0053-6a4e-228603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062154Z-16849878b785jrf8dn0d2rczaw000000016g00000000gc6r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:54 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	58224	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:53 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:54 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:54 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 2e8006eb-901e-0083-471c-26bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062154Z-16849878b78k46f8kzwxznephs00000008n000000000gxwy x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:54 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	58225	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:54 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:54 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:54 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 333c19fd-801e-00ac-16e3-21fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062154Z-16849878b78smng4k6nq15r6s400000001qg000000004yx8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:54 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	58227	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:54 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:54 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:54 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 94ed8cc5-801e-0083-11f2-24f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062154Z-15b8d89586fbt6nf34bm5uw08n000000041g000000004svu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:54 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	58226	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:54 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:54 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:54 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 7f6d22c4-101e-0046-21f0-2591b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062154Z-16849878b787sbpl0sv29sm89s00000008tg00000000n9kg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 06:21:54 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	58228	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:54 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:55 UTC	591	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:54 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 9cf5c506-801e-0083-443d-26f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062154Z-17c5cb586f68ph8xe1hpx7aynw000000027000000000bgqu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-25 06:21:55 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	58229	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:54 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:55 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:54 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: e092e42d-501e-0035-603a-22c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062154Z-16849878b787psctgubawhx7k800000008k000000000fe01 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:55 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	58230	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:54 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:55 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:54 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: cbb0b495-901e-005b-56e4-212005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062154Z-16849878b78k46f8kzwxznephs00000008tg00000000200f x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:55 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	58232	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:55 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:55 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:55 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 27230864-a01e-0070-6533-26573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062155Z-r197bdfb6b4nmq95umz1k4bcyn0000000130000000001gkt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:55 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	58231	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:55 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:55 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:55 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 16f71f95-f01e-0099-73fb-259171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062155Z-16849878b787c9z7hb8u9yysp000000008yg0000000057nu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:55 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	58235	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:55 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:56 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:56 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 0426689f-101e-007a-5ef8-25047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062156Z-17c5cb586f677284pnx3kebuu40000000250000000007qr1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:56 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	58234	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:55 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:56 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:56 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 7d0fe5a3-d01e-0049-4537-26e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062156Z-r197bdfb6b4bq7nf8mnywhn9e0000000015000000000920u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:56 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	58233	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:55 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:56 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:56 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: a2099384-101e-008d-760b-2292e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062156Z-16849878b78bcpfn2qf7sm6hsn00000001s0000000008kn9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:56 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	58236	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:56 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:56 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:56 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 2f6e7a45-901e-0083-466a-26bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062156Z-16849878b787c9z7hb8u9yysp000000008zg000000002x03 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 06:21:56 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	58237	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:56 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:56 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:56 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 654233af-a01e-001e-0b27-2149ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062156Z-16849878b787sbpl0sv29sm89s00000008ug00000000f1w1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:56 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	58239	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:56 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:57 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:56 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 6ac6ea93-701e-0001-1898-25b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062156Z-15b8d89586f42m673h1quuee4s000000043g00000000akrp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 06:21:57 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	58240	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:56 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:57 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:56 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: fbe9264b-c01e-0046-04f3-242db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062156Z-r197bdfb6b4t7wszkhsu1pyev0000000012g00000000aza2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:57 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	58238	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:56 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:57 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:56 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 0cf7dd75-a01e-003d-3e63-2698d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062156Z-16849878b785f8wh85a0w3ennn00000008tg000000007zht x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 06:21:57 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	58241	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:57 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:57 UTC	591	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:57 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 6d89998c-401e-0083-425b-26075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062157Z-17c5cb586f6mhqqb91r8trf2c800000000zg000000005pkk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-25 06:21:57 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	58242	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:57 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:57 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:57 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 9b0a187b-e01e-0020-61f3-24de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062157Z-15b8d89586fbt6nf34bm5uw08n0000000420000000003ama x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 06:21:57 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	58243	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:57 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:57 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:57 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: f1436c55-a01e-001e-41ef-2549ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062157Z-16849878b78p8hrf1se7fucxk80000000120000000004wf1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 06:21:57 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	58244	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:57 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:57 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:57 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 22a25694-101e-007a-3b3f-26047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062157Z-r197bdfb6b4nmq95umz1k4bcyn00000000z0000000009m81 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:57 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	58245	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:57 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:57 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:57 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 9800c975-801e-008c-0e2c-267130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062157Z-17c5cb586f6w4mfs5xcmnrny6n00000001kg000000008u2r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:57 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	58246	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:58 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:58 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:58 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: baa41b4f-401e-00ac-2c28-210a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062158Z-16849878b78hz7zj8u0h2zng1400000008u000000000hpdw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:58 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	58247	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:58 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:58 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:58 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 28718399-201e-0003-7628-26f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062158Z-r197bdfb6b4nmq95umz1k4bcyn00000000zg000000007xz3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:58 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	58249	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:58 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:58 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:58 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 4b9b81ad-501e-007b-4028-265ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062158Z-15b8d89586f4zwgbgswvrvz4vs00000001dg000000002ccp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:58 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	58248	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:58 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:58 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:58 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 60449bdf-301e-005d-500b-26e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062158Z-16849878b78lhh9t0fb3392enw00000008qg000000008z9s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 06:21:58 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	58250	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:58 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:58 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:58 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: f9013c52-001e-0079-5ef2-2412e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062158Z-15b8d89586fbt6nf34bm5uw08n000000040g000000006bbu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:58 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	58251	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:59 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:59 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:59 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: af8bbd6e-001e-00a2-3df5-24d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062159Z-15b8d89586fxdh48qknu9dqk2g000000040g00000000addt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:59 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	58252	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:59 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:59 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:59 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: ffafe551-c01e-007a-413b-26b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062159Z-r197bdfb6b48pcqqxhenwd2uz800000000ug000000009ubb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:59 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	58253	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:59 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:59 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:59 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 474bc074-b01e-0002-67b0-201b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062159Z-16849878b78s2lqfdex4tmpp7800000008r000000000nw8k x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:59 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	58255	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:59 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:59 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:59 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: fda05279-201e-0085-3258-2634e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062159Z-17c5cb586f67p8ffw0hbk5rahw0000000280000000009dsy x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:21:59 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	58254	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:21:59 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:21:59 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:21:59 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: c22b4ca9-401e-0029-7f5c-269b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062159Z-17c5cb586f6zrq5bnguxgu7frc00000000w0000000006ehn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 06:21:59 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	58256	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:22:00 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:22:00 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:22:00 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 622dd3a6-e01e-0003-140d-260fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062200Z-16849878b78j5kdg3dndgqw0vg00000001v0000000009s21 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:22:00 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	58257	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:22:00 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:22:00 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:22:00 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 3d4cb055-601e-0097-01e5-21f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062200Z-16849878b78lhh9t0fb3392enw00000008ng00000000ebs9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:22:00 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	58260	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:22:00 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:22:00 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:22:00 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: d17b1da0-901e-0064-5127-26e8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062200Z-17c5cb586f6mqlb7hyuq0z97g800000002cg000000006tzf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:22:00 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	58259	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:22:00 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:22:00 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:22:00 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: ce674b06-f01e-0052-7d0b-229224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062200Z-16849878b785f8wh85a0w3ennn00000008sg000000009qur x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:22:00 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	58258	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:22:00 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:22:00 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:22:00 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: e081a540-501e-0035-2133-22c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062200Z-16849878b78z5q7jpbgf6e9mcw00000008ug00000000gmdy x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:22:00 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	58261	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:22:01 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:22:01 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:22:01 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: c9ef38c2-001e-002b-2fff-2599f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062201Z-15b8d89586frzkk2umu6w8qnt80000000fkg000000002vk3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:22:01 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	58262	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:22:01 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:22:01 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:22:01 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: f7b99165-401e-0035-1ce4-2582d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062201Z-16849878b78x6gn56mgecg60qc00000001w000000000fg8a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:22:01 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	58263	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:22:01 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:22:01 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:22:01 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: 759e4688-301e-003f-78f2-24266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062201Z-15b8d89586f8l5961kfst8fpb00000000afg000000008sk7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:22:01 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	58265	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:22:01 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:22:01 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:22:01 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: 4769d5f8-401e-0067-710e-2609c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062201Z-16849878b78hz7zj8u0h2zng1400000008u000000000hpfz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:22:01 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	58264	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:22:01 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:22:01 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:22:01 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 366b13b4-c01e-0082-1a80-26af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062201Z-16849878b78nx5sne3fztmu6xc000000013g0000000094r5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:22:01 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	58266	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:22:01 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:22:02 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:22:02 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: 0064e569-401e-0067-43f2-2409c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062202Z-r197bdfb6b4k6h5jmacuw3pcw8000000018g000000009h1d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:22:02 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	58267	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:22:02 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:22:02 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:22:02 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: 8111d5b4-601e-00ab-384d-2666f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062202Z-r197bdfb6b49q4951yb663v3ds000000013000000000c2tp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:22:02 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	58268	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:22:02 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:22:02 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:22:02 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 4a74cd39-001e-0066-3b2c-26561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062202Z-17c5cb586f6qk7x5scs1ghy2m4000000023000000000c942 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:22:02 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	58269	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:22:02 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:22:02 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:22:02 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: e9bbe3b2-401e-005b-3496-259c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062202Z-16849878b78gvgmlcfru6nuc5400000008ug0000000044g5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:22:02 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	58270	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:22:02 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:22:02 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:22:02 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: c53c8a19-f01e-0096-07f7-2110ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062202Z-16849878b78j5kdg3dndgqw0vg00000001yg0000000013qf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:22:02 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	58271	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:22:02 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:22:02 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:22:02 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: 12b50f8a-301e-0033-52f0-25fa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062202Z-15b8d89586fvpb597drk06r8fc000000019g000000000tmb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:22:02 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	58272	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:22:03 UTC	192	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:22:03 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:22:03 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: 458e69a0-101e-005a-559e-26882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062203Z-16849878b78q4pnrt955f8nkx800000008q000000000a7gr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 06:22:03 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	58274	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:22:03 UTC	192	OUT	GET /rules/rule702251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:22:03 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:22:03 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F427E7" x-ms-request-id: f9b59f27-e01e-0099-2c28-26da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062203Z-16849878b786lft2mu9uftf3y400000001d0000000008a80 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 06:22:03 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	58273	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:22:03 UTC	192	OUT	GET /rules/rule700900v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:22:03 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:22:03 GMT Content-Type: text/xml Content-Length: 1371 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:06 GMT ETag: "0x8DC582BED3D048D" x-ms-request-id: de5f6a9b-601e-000d-3d18-262618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062203Z-16849878b78smng4k6nq15r6s400000001p0000000008954 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 06:22:03 UTC	1371	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6f 66 69 6e 67 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700900" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProofing" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	58275	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:22:03 UTC	192	OUT	GET /rules/rule702250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:22:03 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:22:03 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDD0A87E5" x-ms-request-id: dd440b1a-a01e-003d-1afb-2598d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062203Z-17c5cb586f6w4mfs5xcmnrny6n00000001r0000000001bxu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:22:03 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	58276	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:22:03 UTC	192	OUT	GET /rules/rule702651v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:22:03 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:22:03 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEC600CC" x-ms-request-id: b9eac892-301e-0020-6af5-256299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062203Z-r197bdfb6b429k2s6br3k49qn40000000670000000008vvw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-25 06:22:03 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 65 64 69 61 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 65 64 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702651" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Media.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMedi

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	58277	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 06:22:04 UTC	192	OUT	GET /rules/rule702650v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-25 06:22:04 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 06:22:04 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEA1B544" x-ms-request-id: 89ca8faa-901e-008f-2e5a-2667a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241025T062204Z-17c5cb586f6mhqqb91r8trf2c800000001300000000007ua x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 06:22:04 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 65 64 69 61 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 65 64 69 61 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702650" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Media" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMedia" S="Medium" /> <F T="2">

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 4564, Parent PID: 3756

General

Target ID:	0
Start time:	02:20:43
Start date:	25/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 2128, Parent PID: 4564

General

Target ID:	2
Start time:	02:20:45
Start date:	25/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=2036,i,8925119559714918307,14479116229223773409,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6264, Parent PID: 3756

General

Target ID:	3
Start time:	02:20:48
Start date:	25/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://152.199.19.160"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://152.199.19.160

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTP Packets

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 4564, Parent PID: 3756

General

Chronological Activities

Analysis Process: chrome.exePID: 2128, Parent PID: 4564

General

Chronological Activities

Analysis Process: chrome.exePID: 6264, Parent PID: 3756

General

Chronological Activities

Disassembly

Windows Analysis Report
http://152.199.19.160